Limiting access to a location or cost centre

A role can apply to the whole organisation, or be scoped to:

• a location, including every location inside it. For example, Netherlands includes Utrecht, Utrecht – Floor 2 and so on;
• a cost centre.

Example

Give a local IT lead the Asset manager role scoped to Utrecht. They can then:

• see and manage assets at Utrecht and its sub-locations;
• not see or change assets anywhere else. Lists, counts and searches simply don't include them.

Moving an asset between scopes

To move an asset from one location or cost centre to another, you need permission on both the old and the new one. This stops someone from moving an asset out of a colleague's area, or into their own, without the right access.

Good to know

• Scoped roles can be given to people and groups.
• A person can hold a role organisation-wide and another role scoped to one location; they get the combination.
• Roles given through invitations are always organisation-wide. Add scoped roles afterwards.