In the Scope object (of which we only have one), our Organization object is chosen, with the check box selected for Include Sub-containers.

In the Policy object (we have two, but only one got configured), we've left the scope field blank on the General tab and we've been adding users to the Used By tab as they get permission to use the IM system.

Now the IM system has been released as general use, so I was thinking I could just put the scope object in that field and remove all users from the Used By tab. I tested this by removing myself and it didn't work.

So, what's the relationship here and how to I just enable all users in the "O" to have access to IM (once the app gets on their PC)?