Glossary
Scoped Admin Role
A scoped admin role grants administrative authority limited deliberately to a specific subset of an organization — a single team, a single department, a single region — rather than to the organization as a whole. A team lead might administer their own team's membership and settings without holding any authority over any other team, which lets administrative work be delegated to the people actually close to it without each delegation also handing over organization-wide reach that the task never required.
Getting the boundary right requires the underlying permission system to actually support this kind of scoping natively, rather than treating 'administrator' as a single, all-or-nothing designation. A system that only offers full organization-wide admin or no admin at all forces every delegation to be broader than it needs to be, which accumulates into exactly the kind of unnecessary standing access that's expensive later even when nothing goes wrong with any individual grant.