When IP neighbor scanning is enabled the IPAM product presents SNMP RO communities to a device until it is successful, regardless of whether the community is the appropriate one, or if the community belongs to a different customer group. This exposes valid SNMP RO community strings to devices that should not get them.
In the IPAM neighbor scanning setup it would be useful to be able to specify the actual community to present for a subnet.