Defines the accounts, organizational units, and firewall types that an administrator can manage.
The firewall types that the administrator can create and manage.
The filter that determines which accounts and organizational units are in the administrator's scope.