PIM backend configuration
Review the explicit group-scoping requirement recorded for the School Administrator role and the automation described as maintaining those scopes.
Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
Explicit Scoping of School Administrator
School Administrator role needs explicit scoping for every group that you might want to assign an app/policy to, rather than an implicit scoping based on larger groups.
From <https://it.servicedesk.ccmschools.app/Ticket/6545>
An automation exists to handle the maintenance of these scoping changes, as an added feature of the pre-existing automation which maintains the membership of the <school>: Groups admin unit. The change is that the educationClass groups (the automatically created school/subject/year groups) are excluded, because the source describes them as outside the expected policy-targeting scope.
From <https://it.servicedesk.ccmschools.app/Ticket/6545>