A config scope has a direct permissions that you can set when creating it or editing it.

You need to have the Default permission to create and edit config scopes.