Depending upon how your Windchill solution was set up during installation, end users (users that do not have administrative privileges) are managed in one of two ways:

Windchill uses both the Windchill database and a directory service when creating users. For each user, there is an entry in a directory service and a Windchill object stored in the database.

In the out-of-the-box configuration, there are two LDAP directory services: the Administrative LDAP service and the Enterprise LDAP service. End users can reside in either service; although typically, the Administrative LDAP service should be used for administrative users and enterprise LDAP service should be used for all end users who are not administrators. For more information about the LDAP services, see Working with LDAP Directory Services.

It is not required that end users be associated with an organization; however, categorizing users by organization provides an additional way in which you can identify a set of users. Windchill manages Windchill objects within each organization context and users affiliated with an organization can be given access to objects created from within an organization context.

If you want to manage users based on license type, license groups are available out of the box. These groups are members of license profiles that restricts group members to capabilities associated with the license. For more information, see Windchill License Groups.