Advanced Scoping for User Roles

Overview

Advanced Scoping lets you control role-based access using AND, OR, and Nested Scopes. Instead of broad access, you can now restrict roles to the exact intersection of departments, business units, and locations—ensuring users see only the employees they’re responsible for.

Who can access this feature?

• Admins with access to Settings > Roles & Permissions
• Users who can manage User Roles 

How Advanced Scoping Works

OR Logic (Broad Access)

Use OR when:

• Selecting multiple values from the same category
• Any one condition should match

Example:

Location == Mumbai OR Pune OR Navi Mumbai

In this case, user will get access to all the employees who belong to location Mumbai or Pune or Navi Mumbai. 
 

AND Logic (Restrictive Access)

Use AND when:

• Employees must match multiple different categories
• You want intersection-based visibility

Example:

Department == Residential Mandate 
AND 
Location == Mumbai 
 

Nested Scopes

Nested Scopes allow you to:

• Group OR conditions together
• Connect them to another category using AND

This prevents logical conflicts and zero‑result scopes.

Example Scenarios

Scenario 1: Cross‑Functional HR Partner

Goal 
An HR Manager should access employees from Residential Mandate in Mumbai or Pune.

Logic Setup

Department == Residential Mandate 
AND 
Location == Mumbai OR Pune 
 
Department == Residential Mandate AND ( Location == Mumbai OR Location == Pune )

Outcome 
The HR Manager sees only employees matching both conditions.

Scenario 2: Regional Department Control

Goal 
An IT Admin manages Commercial & Retail Strata assets only for the Hyderabad or Chennai office.

Logic Setup

Department == Commercial & Retail Strata 
AND 
Location == Hyderabad OR Chennai 
 

Steps to Configure Advanced Scoping

Step 1: Open the Role Scope Panel

1. Go to Settings > Roles & Permissions > User Roles
2. Locate the role you want to edit (for example, Asset Manager)
3. Scroll to Manage Users for Role

1. Click [+ Add New] to create a new scope block

Step 2: Open the Advanced Scoping Drawer

1. In the new scope block, click + Add Condition / + Apply Logic
2. The Advanced Scoping panel slides in from the right

Step 3: Add OR Conditions (Same Category)

1. Click the first Select dropdown
2. Choose a category (Location, Department, Business Unit, Sub Business Unit)
3. Select a value
4. Click + Add Condition and keep the operator as OR

Step 4: Add AND Conditions Using Nested Scopes

1. Click + Add Nested Scope
2. Change the operator between blocks from OR to AND
3. Inside the nested block, select a different category and value

Step 5: Apply Logic and Assign Users

1. Review the logic structure visually
2. Click [Apply Scoping Logic]
3. In the Add users field, select employees
4. Click [Save] to activate the scope

Logic Reference Examples

Multi‑City Access

Location == Mumbai OR Pune OR Navi Mumbai 
 

Business Unit Access

Business Unit == ANACITY 
OR 
Business Unit == AI and Technology 
OR 
Business Unit == Technology 
 

Strict Department + Location Matrix

Department == Residential Mandate 
AND 
Location == Mumbai 
 
 

Important Notes

• ✅ Group OR values from the same category in one block
• ✅ Use AND only between different categories
• ❌ Do not use AND between values of the same field

Incorrect Example

Location == Delhi AND Location == Noida. 

This returns zero employees.