Skip to content

Scoping access

Four scopes narrow what a permission reaches, and each one means something different.

For Owners, System AdminsLast updated 15 October 2026Open in the app

An Admin starts on their role's default permissions. Switch someone to custom access and each permission can be limited to a scope.

The four scopes

  • Workspace. Everything of that kind, everywhere. The default for most permissions.

  • Location. Only records assigned to the named locations. Records with no location are visible to everyone who holds the permission.

  • Department and Team. Only *people* in that department or team. These scopes apply to people permissions; they are refused for app permissions, where they would match nothing.

  • All-locations access. A flag on a Console user that lifts location scoping entirely. Nobody can grant it to themselves.

Give someone custom access

  1. Open People & access and find the person.

  2. Open the row's menu and choose Access.

  3. Change Permission mode to Custom scoped access. The permission catalogue opens, one row per permission.

  4. Tick each permission they need and choose its scope.

  5. Choose Save access. It takes effect on their next request.