Entitlements
Capabilities addressed by stable keys.
An Entitlement is a named product capability within a Project. A stable key such as premium, analytics, or advanced_reports is what your backend uses in an access check.
The key is immutable after creation. Other Entitlement metadata can be managed through the supported API, but an Entitlement is not a plan, License, seat, or direct assignment to a customer identity.
One License may include several Entitlements. An external user obtains access to an Entitlement when a currently valid License allocation provides a valid Grant for that capability. Checking entitlementKey with an externalUserId asks BusinessMode for the effective decision; it does not authenticate the customer user.
See create Entitlement, update Entitlement, and check access. The Access decisions page explains how allocation becomes authorization.