An entitlement is a discrete access right or privilege in a system, such as membership in a group, permission to approve invoices, access to a folder, an application role or an API scope. Entitlements are the building blocks assigned directly or bundled into roles.
For effective governance, each material entitlement needs a clear description, owner, risk classification, approval rule and review policy.