The scope of VMs to send their security data to the desired workspace, unless overridden by a setting with more specific scope.