To explain an Entitlement please refer to our Entitlement Example
Entitlements are closely related to a privilege
Entitlements have Zero or more Entitlement parameter values.
Roles are collections of one or more Entitlement(s).
Entitlements typically have Entitlement parameter values. As an from our Entitlement Example the entitlement:
"Access to the Building they work in" might have a multi-valued attribute to Identity which Buildings the entity "Works In"
These Entitlement parameter values are from an attribute form the Digital Identity
We typically strive to utilize the Access Control Model called Adaptive Policy-based Access Management (APAM) when implementing Roles and Entitlement.
There might be more information for this subject on one of the following: