Definition
What objects an account can see. Roles control write access; scope controls whose objects are visible. Non-admins see only objects under projects they created or own by default; admins can assign several objects or "All"; drill down the organization tree. Not DBS textbook content.
In detail
Objects outside scope are treated as "not found" (404), not "forbidden" (403) — 403 would leak that such an object exists. Management boards, briefings, and meetings read by production line are also subject to scope. Self-service registration is disabled by default; accounts are created by administrators.
Example in practice
The initiator is a read-only account; the administrator scopes to his project objects; when he opens the ledger, objects, or briefings, he only sees items under this project; other projects do not exist.