Entitlements

The entitlement viewer is a diagnostic tool. Select a user and it shows their effective groups, workspaces, applications, and policies — the access that actually results from your configuration.

The viewer resolves a user through groups to the resources they can reach.

When to use it

Verifying setup — confirm a new user sees the workspaces you intended.
Investigating access issues — understand why a user can or cannot reach an application.
Access reviews — spot over-broad membership before it becomes a finding.

How to read the result

Access is the union of everything the user's groups grant. If an expected workspace is missing, check that the user is in the right group and that the group is assigned the workspace. If unexpected access appears, look for an over-broad group such as everyone.

Tip

Make the entitlement viewer the last step of any access change. A quick check here prevents the most common support ticket: "I can't see my application."