By default, the Active Directory driver includes the entitlements listed below. You can use these entitlements as examples of the types of entitlements you might want to create for other drivers.
User Account Entitlement: Grants or revokes an account in Active Directory for the user. When the account is granted, the user is given an enabled logon account. When the account is revoked, the logon account is either disabled or deleted, depending on how the driver is configured.
Group Membership Entitlement: Grants or revokes membership in a group in Active Directory. When this entitlement is granted, the user is added to the group in Active Directory. When this entitlement is revoked, the user is removed from the group in Active Directory.
Exchange Mailbox Entitlement: Grants or revokes an Exchange mailbox for the user in Microsoft Exchange.