Recast limiting rules (formerly known as scopes) are lists of devices. You can add a limiting rules when you create a route or limit user permissions to a set of devices. A user assigned a role and its associated permissions will automatically be allowed to perform tasks within the bounds of a specific limiting rule, which may include certain devices, users, AD OUs, or AD groups.