Enterprise Administration > Windchill ESI > Administering Windchill ESI in an SAP Environment > Adding Users to Windchill ESI Groups and Mapping Roles
  
Adding Users to Windchill ESI Groups and Mapping Roles
As a Windchill ESI administrator, you may need to create Windchill ESI users and then add them to certain groups and map these groups to defined roles so that they can receive appropriate tasks and email notifications.
During the installation process, Windchill ESI creates two groups with specific access controls. It also creates a team template called ESI Team which has two roles associated with the Windchill ESI workflow. Initially, these two roles are assigned to the Windchill PDMLink Administrators group.
However, you can assign users to the different groups, or map either these groups or individual users to the roles to suit your environment and business requirements.
It is recommended that you get very familiar with teams, groups, roles, and participants and how they work, before modifying these settings.
* 
The two ESI team template roles can also be defined by a team instance of the business object that is being published. If users are already assigned to one or more of these roles, those users retain their privileges and any users that you define through the ESI team template are overridden. For example, if User A has been assigned to the group ESI Administrators by the team instance of a business object and if User B is assigned the same role in the ESI Team template, only User A retains the privileges assigned to that role, overriding those assigned to User B.
The following table lists the Windchill ESI groups, the ESI team template roles that they map into and the minimum permissions that are required for each of these roles:
Group
ESI Team Template Role
Minimum Permissions Required
ESI Administrators
Change Admin III
Able to view all the Windchill ESI transactions through the Enterprise Systems Transaction Administration UI, accessed through the Site or OrganizationUtilities page in Windchill PDMLink.
Able to view task assignments via email notification and when logging into Windchill PDMLink.
* 
To create Windchill ESI targets or view all Windchill ESI transactions via the Site tab, the ESI Administrators group also has to be a member of the Site Administrator’s group. For detailed information on this group refer to the section Basic Administration.
ESI Authors
Engineers
Able to view task assignments via email notification and when logging into Windchill PDMLink.