The scope field controls the objects to which the attribute can be attached. If scope is defined, the attribute can be attached only to objects defined by the scope. For example, if the scope for a given attribute type is defined as the directory name /principal/krbgt, instances of that attribute type can be attached only to objects in the /principal/krbgt directory (a directory that by convention contains only cell principals). If the scope is narrowed by fully specifying an object in the /principal/krbgt directory (for example, /principal/krbgt/dresden.com) then the attribute can be attached only to the dresden.com principal.