Scope gives you granular control over which computers, mobile devices, and users receive remote management tasks. For example, you can use scope to ensure that a policy to install desktop publishing software only runs on computers in the Design department, or that a book is only distributed to students in a particular class. Scope can be based on the following items:
Individual computers, mobile devices, or users
Computer, mobile device, or user groups
Departments
Buildings
Directory service or local users
Directory service user groups
Note:Jamf Pro may experience performance issues if too many directory service groups are included in the scope of an object. If you need to use multiple directory service criteria within a scope, consider creating a smart group with those criteria, and then scope to that smart group instead.
Network segments
Classes
iBeacon regions
The items available vary depending on the remote management task you are configuring the scope for. For example, only book scope can be based on classes.
Scope cannot be based on personally owned mobile devices.