Legacy service catalog access controls Service catalog supports several ways to control access to a catalog item or category; this is also known as catalog entitlements. A service catalog item with no specific access controls is available to all users. If access controls are specified, only users who meet all conditions have access. The following entitlements are available: Role Custom script Company, Department, Group, User, or Location Access controls are checked in the following order: roles, then scripts, then Company, Department, Group, User, or Location. Note: The functionality described here is superseded by access controls using user criteria. Migrate to user criteria for a more flexible and re-usable way to define access controls.