--- title: "Entitlements" slug: "entitlements-v6-5" description: "Learn how to configure Entitlements for user access, including actions, conditions, and app shortcuts, to enhance site security and resource management." updated: 2025-12-04T16:33:51Z published: 2025-12-04T16:33:51Z canonical: "support.appgate.com/entitlements-v6-5" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.appgate.com/llms.txt > Use this file to discover all available pages before exploring further. # Entitlements Entitlements contain Actions which define the resources that users/devices will be allowed to access on a given Site (firewall rules) and may also include App Shortcuts which are presented in the Client. ## Before you start Pre-configure the following elements: - Sites: if using URL access (HTTP up Actions) then you will need a PKCS #12 file for the URLs you plan to protect, refer to [Sites Configuration](/v1/docs/tunneling). - Name resolvers: you should [configure the Site](/v1/docs/configure-site) first, so the correct options are displayed when configuring the [Entitlement Action](/v1/docs/configure-entitlements). You should configure the Cloud platform first so that Appgate SDP can discover the types of resources and their values (ie Tag names). - Entitlement Scripts: [upload any scripts](/v1/docs/entitlement-scripts) you plan to use, making sure any host definitions are correct. - Conditions: you should [configure any Conditions](/v1/docs/configure-conditions) first, so these can be referred to when configuring [Entitlements > Access control](/v1/docs/configure-entitlements). Background information: - Use of [Application Discovery](/v1/docs/application-discovery) to help identify the minimum set of Entitlements required - Provisioning user rights, refer to: [User/Device access](/v1/docs/userdevice-access) - Configuring name resolvers, refer to [DNS and name resolution](/v1/docs/dns-and-name-resolution-2) - Find out more about best practice in [using Entitlements](/v1/docs/using-entitlements) - Defining hosts can be done in several ways: - [Using IP/hostnames](/v1/docs/iphostnames) - [URLs](/v1/docs/urls) - [Resource names](/v1/docs/resource-names) - [Entitlement scripts](/v1/docs/entitlement-scripts) - Benefiting from [route optimization](/v1/docs/routing-client-traffic) - Using the [Risk model](/v1/docs/risk-model) for access control - [Disable, change or remove access](/v1/docs/disable-change-or-remove-access) to Entitlements - Dealing with [Overlapping Entitlements](/v1/docs/overlapping-entitlements) Use the Entitlements form for: - Creating access rules: create Entitlements that define what traffic is allowed for target hosts on a Site - Changing access rules: re-configure permitted actions and/or attach Conditions to the Entitlement - Adding an Alert or Blocking traffic eg. to monitor for irregular network traffic - Cloning Entitlements: create new Entitlements quickly and avoid errors by duplicating existing Entitlements - Performing actions using the action buttons provided (See below). ***Remember DNS***. Unless you are using the Client DNS auto-configuration option, you need to add an Entitlement so the user's application is able to access the DNS server(s) you have specified. Leave access control set to Always Allow Action(s). For details on completing the form, refer to [configure Entitlements](/v1/docs/configure-entitlements) ## Settings ![](https://cdn.us.document360.io/e7482ce5-acfa-4c3b-b76c-b6c32472644a/Images/Documentation/ag62-cog(1).png?sv=2026-02-06&spr=https&st=2026-10-28T23%3A22%3A39Z&se=2026-10-29T00%3A22%3A39Z&sr=c&sp=r&sig=jtweb3artjSSFvI9CAFMnJStME4nF8su0rDYcPZzp0A%3D) There is the option of Normal or Details view. Details expands the information for app shortcut, Action and Conditions. ## Actions The Admin UI tools page provides [more information](/v1/docs/admin-ui-tools) about the operations that can be performed. ## Action Buttons Action buttons are accessed by clicking the 3 dots to the right of each line item in the table or from the button within the item. They are contextual, changing depending on the type of item and the state of the item. - ***Enable/disable Entitlement Status***. This switch allows the status to be set to enabled or disabled. - ***View Policies linked by name***. This analyzes the system configuration and determines all the Policies (by name) that include this Entitlement. - ***View Policies linked by tag***. This analyzes the system configuration and determines all the Policies (by tag) that include this Entitlement. A defined access right or permission granted to users or devices, allowing them to access specific resources or functionalities within the Appgate ZTNA system. Appgate SDP (Software Defined Perimeter) is a security solution that provides secure access to resources based on user identity and context, leveraging a zero trust security model.