Legacy service catalog access controls Service catalog supports several ways to control access to a catalog item or category. These controls are also known as catalog entitlements. A service catalog item with no specific access controls is available to all users. If access controls are specified, only users who meet all conditions have access. The following entitlements are available: Role Custom script Company, Department, Group, User, or Location Access controls are checked in the following order: roles, then scripts, then Company, Department, Group, User, or Location. Note: The functionality described here is superseded by access controls using user criteria. Migrate to user criteria for a more flexible and reusable way to define access controls. Service Catalog administrationService Catalog enables an administrator to configure the service catalog.Restrict accessService Catalog enables an administrator to grant or deny access to a service catalog item or category by company, department, group, user, or location.