(1) In security management, a service and list of attributes that identifies the target for a provisioning policy.
(2) A data structure that contains externalised security policy information. Entitlements contain policy data or capabilities that are formatted in a way that is understandable to a specific application.