organization <organization> [and lower]

The scope includes the specified organization and, optionally, that organization’s suborganizations.

organization where <org-filter> [and lower]

The scope includes organizations that contain a specific attribute and, optionally, those organizations’ suborganizations.

admin’s organization [and lower][include root]

The scope includes the organization where the administrator’s profile exists and optionally that organization’s suborganizations.

Note: In organizations that include a container for users, such as the People container, selecting [and lower] includes the container where the administrator’s profile exists, and all of the organization’s suborganizations. If no container exists, only suborganizations meet the filter criteria.

To include the organization where the user container exists, specify the [include root] option.

organization that is a value in admin’s <admin-attr> [and lower]

The scope includes organizations that have an attribute that matches an attribute in the administrator’s profile. If [and lower] is specified, suborganizations of the organizations that meet the filter are included in the scope.

organization with groups where <group-filter> and the admin is a member [and lower]

The scope includes organizations that contain groups that meet the group filter criteria and where the administrator is a member (and, optionally, that organization’s suborganizations). For example, for users, this rule applies to users who exist in the organization that meets the criteria in the rule. For organizations, this rule applies to organizations that exist in the organization that meets the criteria in the rule.