# PIM backend configuration

Review the explicit group-scoping requirement recorded for the School Administrator role and the automation described as maintaining those scopes.

!!!warning Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
!!!

## Explicit Scoping of School Administrator

School Administrator role needs explicit scoping for every group that you might want to assign an app/policy to, rather than an implicit scoping based on larger groups.

From \<<https://it.servicedesk.ccmschools.app/Ticket/6545>\>

An automation exists to handle the maintenance of these scoping changes, as an added feature of the pre-existing automation which maintains the membership of the \<school\>: Groups admin unit. The change is that the *educationClass* groups (the automatically created school/subject/year groups) are excluded, because the source describes them as outside the expected policy-targeting scope.

From \<<https://it.servicedesk.ccmschools.app/Ticket/6545>\>

## Related guidance

- [Topic overview](Introduction.md)
- [Source review status](../../review/Review-status.md)
