Manage an access scope

Maintain and adjust saved resource groupings

Access scopes let you group resources based on defined criteria so you can reuse them across access flows.

By viewing, updating, duplicating, or deleting scopes as needed, you can ensure they remain accurate, relevant, and aligned with your security requirements.

​​View an existing access scope

You can view an existing access scope to see which resources match its criteria, check which access flows use it, and review its history before making changes or reusing it.

Access Scope Details panel

Follow these steps to view an access scope:

  1. On the Access Scopes page, under Access Scope, click the access scope name to view a list of resources filtered by the criteria of the access scope.

If your list of access scopes is long, you can enter the name of the access scope in the search field to filter the list.

  1. Click More Details to view the history of the access scope. The Access Scope Details panel opens displaying the following information:

    • Name

    • Creation Date

    • Created By

    • Updated Date

    • Updated By

    • List of access flows configured with the access scope

  2. Click X in the right corner to close the panel.

Update an access scope

You can update an access scope to refine its criteria and ensure it only captures the intended resources.

Before updating an access scope, remember the following:

  • Ensure that the access scope criteria are narrowly defined. Access scopes automatically adjust as new resources matching your criteria are identified across integrations. Broad or overly permissive criteria may inadvertently grant unauthorized user access.

  • Any updates will impact associated access flows and future requests users can make.

Update Access Scope pop-up window

Follow these steps to update an access scope:

  1. On the Access Scopes page, under Access Scope, click the access scope name. A list of resources appears filtered by the criteria of the access scope.

If your list of access scopes is long, you can enter the name of the access scope in the search field to filter the list.

  1. Adjust the Basic filters or the Apono Query Language (AQL) query.

  2. Click (save icon) to update the access scope. The Update Access Scope pop-up window appears.

  3. Click Update Changes.

Duplicate an access scope

You can duplicate an access scope to create a new scope from existing criteria and then adjust it as needed for your requirements.

Ensure that the access scope criteria are narrowly defined. Access scopes automatically adjust as new resources matching your criteria are identified across integrations. Broad or overly permissive criteria may inadvertently grant unauthorized user access.

Duplicate Access Scope pop-up window

Follow these steps to duplicate an access scope:

  1. On the Access Scopes page, under Access Scope, click the access scope name. A list of resources appears filtered by the criteria of the access scope.

If your list of access scopes is long, you can enter the name of the access scope in the search field to filter the list.

  1. Click (duplicate icon) to duplicate the access scope. The Duplicate Access Scope pop-up window appears.

  2. Enter a new Access Scope Name.

  3. Click Duplicate Access Scope. The access scope is duplicated.

  4. Adjust the Basic filters or the Apono Query Language (AQL) query.

  5. Click (save icon) to update the access scope.

Delete an access scope

You can delete an access scope when it is no longer needed or used in any access flows.

Deleting an access scope is permanent.

Follow these steps to delete an access scope:

  1. On the Access Scopes page, under Access Scope, click the access scope name. A list of resources appears filtered by the criteria of the access scope.

If your list of access scopes is long, you can enter the name of the access scope in the search field to filter the list.

  1. Click (trash icon) to delete the access scope. A confirmation pop-up window appears.

An access scope can only be deleted if it is not associated with an access flow. If an access scope is linked to one or more access flows, a popup window will appear with links to the relevant access flows:

  1. Click each link to open the associated access flow.

  2. Remove the access scope from the access flow.

After you have removed the access scope from all access flows, return to the Inventory page to delete the access scope.

  1. Click Yes. The access scope is deleted.

PreviousAccess ScopesNextRisk Scores

Last updated

Was this helpful?