Filter resources by scope
After you have created a scope, you can use it to display only the resources assigned to it.
If the permissions for a logged in user are all restricted by scope, the default setting for this filter is All resources in scope. With this setting, the master pane view is restricted to resources in those scopes.
If the permissions for a logged in user are not restricted by scope, the default filter setting will be All resources.
For example, if a user has two active permissions, (Server administrator, Production) and (Network administrator, Test), the Scopes filter defaults to All resources in scope and displays resources in both the Production and Test scopes. When the (Network administrator, Test) user permission is disabled, the Scopes filter continues to default to All resources in scope, but only resources in the Production scope are displayed.
If a user has the active permission (Server administrator, All resources), the Scopes filter defaults to All resources.
If you are an Infrastructure administrator with no scope restrictions, enable the Restrict user interface read access by scope option to prevent scope-restricted users from viewing resources that are not in scope. If you are an scope-restricted user, you are defined with a role and restricted by scope.

