scf_set_scope_override
Set a control's scope override: include, exclude, or inherit from framework. Record the reason for audit trail.
Instructions
Force one control in or out of scope whatever its frameworks imply (write — editor+). 'include'/'exclude' pin it; 'inherit' clears the override back to the framework rollup. Scope only, not status.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | 'include' pins the control in scope, 'exclude' pins it out, 'inherit' clears the override AND discards the recorded rationale (it stays in the audit trail) | |
| org_id | Yes | Organization UUID — obtain from scf_list_organizations | |
| reason | No | Why this control is being overridden — recorded in the audit trail (max 2000 characters) | |
| scf_id | Yes | SCF control identifier in DOMAIN-NN format — obtain from scf_list_scoped_controls |