Agent Operations
Engagement Scope
Also: scope of testing
The written list of systems, accounts, data and time window a security test may touch; everything else is out of bounds.
In more detail
Scope is the first thing agreed in an authorized test. It names the agents, repositories, machines and accounts in bounds, and treats anything unlisted as out of scope. A tester who needs something outside the list stops and asks. Third-party services usually cannot be placed in scope by you alone.