Policy Administration - Domains

Version: Windchill 13.0

Use Case: I am looking into how best to take advantage of the "Policy Administration" functionality to govern access to Windchill objects and am trying to understand how "Domains" behave within Windchill. I have looked at a lot of the resource in Windchill Help Centre but I still have a few questions.

Description:

1. I am an Administrator but, when I look at my user account, my account is described to be in the "Unaffiliated" domain. As an Administrator, I would expect my account to be associated with the "System" domain. Can anybody explain?

2. Evidently, groups and users can be affiliated with certain domains. Does this mean that rules contained in one domain would not apply to a user if the user is not associated with that domain, even if the domain that the user is not described to be affiliated to lists a rule that would apply to one of the user groups that the user is a member of?