Scopes

Navigate to Main menu > Admin > Access Control, the Scopes tabs enable you to manage access across the Ivanti Neurons Platform.

Scopes

Use scopes to define which devices members can see and manage. Administrators can create a scope containing a static list of devices or they can create a scope that works dynamically based on filters.

Members can have multiple scopes assigned to them. Scope creation and assignment requires the Access Control > Modify Scopes permission.

Scopes currently apply to only the following areas of Ivanti Neurons platform:

  • Devices
  • People
  • Smart Advisors
  • Dashboard components that get data from Devices or People
  • Remediation Insights
    This gives you more control over your devices and their visibility across Ivanti Neurons. The exposures and assets are shown to the users based on the applied Device Scope.
    For users with restricted access, an informational message will appear in the Predictive Compliance flyout, the Exposures view, and the Insights page. This message clarifies that administrator-set scopes may limit the number of assets and exposures they can see.
  • Bots (Custom Action)
    The use of Custom Actions can now be restricted using Neurons Scopes, providing enhanced security by controlling which device groups or people a bot is allowed to execute actions against, based on the scope access of the user who triggered the bot. For more information on Scope for Run now, see Run now.
  • Patch Management
    In certain scenarios, the number of devices found in a scope may be higher than the number of devices available in Patch Management once this device scope is assigned. The icon shows the information in the column is not as per specified scope. A banner also indicates this on the top of the page.
  • Patch Management Reports
    Patch Management reports are generated based on the device scopes assigned.
    Learn more about Patch Management Reports.
  • Edge Intelligence (Device Scope supported)
    In certain scenarios, the number of devices found in a scope may be higher than the number of devices available in Edge Intelligence once this device scope is assigned.
    Scenarios are:

    1. When configuring a scope, the used filter criteria can result in identical devices. For an example: multiple devices with the same computer name.

    2. Not all devices have the Edge Intelligence engine or capability installed.

    3. Device being offline for longer than 30 days, which Edge Intelligence will clean up.

  1. Go to Main menu > Admin > Access Control > Scopes.
  2. Click Create new > Create device scope, to open the New Device Scope page.
  3. Enter a Scope name.
  4. Under Scope type, select Dynamic. It's the default.
  5. Under Scope filters, build a filter that includes the devices you want.
  6. At the bottom of the page, click Save & Close.
  1. Navigate to Admin > Access Control > Scopes.
  2. Click the scope you want to modify or click Create New > Create Device Scope, to open the new device scope page.
  3. Enter a Scope name.
  4. Under Scope type, select Static.
  5. Click Add devices.
  6. Click Add or select the box next to each device you want to include in the scope. Use the search field to filter the list.
  7. Click OK when you have finished adding devices. The devices you selected appear in the scope's device list.
  8. Click Save & Close on the top right of the page.
  1. Go to Main menu >Admin > Access Control > Scopes.
  2. Click Create new > Create people scope, to open the New People Scope page.
  3. Enter a Scope name.
  4. Under Scope type, select Static.
  5. Click Add People.
  6. Select the checkbox next to each username you want to include in the scope. Use the search field to filter the list.
  7. Click OK when you have finished adding devices. The users you selected appear in the scope's assigned list.
  8. At the bottom of the page, click Save & Close.
  1. Go to Main menu > Admin > Access Control > Scopes.
  2. Click the scope you want to modify or click Create new > Create device scope, to open the new device scope page.
  3. Enter a Scope name.
  4. Under Scope type, select Dynamic. It's the default.
  5. Under Scope filters, build a filter that includes the devices you want.
  6. At the bottom of the page, click Save & Close.
  1. Navigate to Admin > Access Control > Members.
  2. Find the person in the list and click on their Name to open the member Details page.
  3. Click the Scopes field.
  4. Click Add Scope > Device Scope.
  5. From the Device scopes list, select the scopes you want to assign to the member.
  6. Click Assign scopes.
  7. When you have made the desired changes, click Save & Close.
  1. Navigate to Admin > Access Control > Scopes.
  2. On the required scope, click and select Remove Members to remove a member from the scope.

    If the scope is not assigned to a member, the Remove Members option will be disabled for that particular member.

  1. Go to Main menu > Admin > Access Control > Scopes.

  2. Click Create New > Copy from Device Group.
    The Device Group window appears.

  3. Select the desired device group or use the search box to filter out the device.

  4. Click Copy to Scope.
    The New Device Scope page appears.

  5. Enter the Scope Name.

  6. Configure the scope as required.

  7. Click Save & Close on the top right of the page.