Assigned directory lab
Label: original fictional grant. No VPN was connected.

Assigned host: vm-desk-3.lab.invalid
Directory name on the card: club.lab.invalid
Allowed action: read this scope card and the printed session note.
Time: this reading.
Excluded: vm-other-9.lab.invalid and every other host a VPN list might show.
Stop: reachability is not a grant. No ticket request, no share listing, no password reset.

A platform room, if you use one later, must name its own host. This fictional card does not assign a live host.
Building a domain controller is not required and is not part of the grant.