Scopes

When you assign an administrator role, you can select the scope. Scopes can be defined along different dimensions:

• Organizations: Restrict the organizations that an administrator can manage. Administrators can manage only users who belong to the organizations that are included in the scope.

• Access roles: Restrict the access roles that an administrator role can manage. Administrators can manage only users with the access roles that are included in the scope.

Add a scope

You define custom scopes within the context of an organization, and those scopes exist only in context of that organization.

1. In the left page, select Administrators > Scopes, and then select Add scope.

   

2. On the Add scope page, enter a Scope name and optional Description.

   

3. Under Organizations in scope, select the organizations to include in this scope.

   The list can include the following organizations:

   • Root
   • Root and organizations directly under it
   • Root and all organizations under it
   • Organizations directly under root, excluding root
   • All organizations under root, excluding root

   

4. Under Access roles in scope, select the access roles to include in this scope:

   • All access roles: The scope applies to all access roles that are available to the organization.

   • Custom selection: Select the access roles that the scope applies to:

     

5. Select Save.

Delete a scope

1. On the Scopes page, select the menu for the scope that you want to delete.

2. In the menu, select View details.

3. In the top-right menu on the scope details page, select Delete scope.