A security scope has direct permissions that you can set when creating it or editing it.

You need to have the Default permission to create and edit security scopes.