To create address groups, you must first identify the scope of the address group relevant to your requirement. The scope identifies the level at which the address group is applicable in the resource hierarchy.
If you want to use an address group in a firewall policy rule that applies to an individual project, use a project-scoped address group.
If you want to use an address group in a firewall policy rule that is applicable throughout the hierarchy on all resources in an organization or network, use an