Cisco
Login
Search
Software Secure Workload
Activity Configure

Manage Inventory for Secure Workload Scopes and Inventory Scopes Providing Access to Scopes

Last updated: Jun 09, 2025

Providing Access to Scopes

You can grant Read, Write, Execute, Enforce, and Owner abilities on Scopes. For more information see the Roles section in the Secure Workload User Guide.

A User is given access to a “sub-tree”. That is, the given Scope and all its children. Using the preceding example, you have the Read access to the Workloads:FrontEnd scope would, by inheritance, have read access to all the scopes under Workloads:FrontEnd including:

  • Workloads:FrontEnd:Mongo

  • Workloads:FrontEnd:ElasticSearch

  • Workloads:FrontEnd:Redis

  • etc. . .

It’s possible to define Roles with access to multiple Scopes. For example, an “Mongo Admin” role might have Owner access to the Scopes:

  • Workloads:FrontEnd:Mongo:MongoServer

  • Workloads:FrontEnd:Mongo:MongoDBArbiter

Roles and Capabilities allow you to have horizontal access to the Scope hierarchy.

Scope Abilities are also inherited. For example, having the Write ability on a Scope allows one to also Read that information.

Previous topic Full Scope Queries Next topic Viewing Scope