KACE Product Support

Hello, we are using Roles, and scope some of the roles to manage certain devices and or device labels. If they try to manage any device they arent scoped to, KACE wont allow it.

However, a schedule was created and a user with a scoped role did not assign any devices or device labels to the the schedule. They were able to deploy a patch job to every device managed by KACE. This was not expected behavior. Could this be a bug or a role configuration error?