Is anybody able to enlighten me to the purpose of the /System domain at product level?
The parent /Private domain at organization level I get (I think). For private products this becomes the parent of /Default domain at product level.
Out of the Box the /System domain is a child of /Private for products, libraries, projects and programs and this is the case regardless if the container is part of a shared team, or marked private or public.
When do the /system rules at product level come into play? To take just one specific example out of the box /System contains a rule to grant all permissions on cabinet to teamMembers, which I can’t explain as the cabinet is associated to the /default domain. Hence it would appear to be redundant.