Scope = where settings applyScope decides how widely a rule or access assignment applies. Apply settings at a chosen boundary. Parent → child inheritance is possible. Higher scope equals wider impact. Choose scope based on intent.