**BeyondTrust Entitle**  delivers just-in-time, time-bound access to cloud resources and applications - and this app brings those requests into ServiceNow, where your employees already work. Users open the  **Request Entitle Access**  catalog item, see only the resources Entitle reports them eligible for, pick an access duration from your configured options, and submit. No standing privileges, no separate portal to learn.

Approvals run natively in ServiceNow: route to a default approval group or the requester's manager, and automatically escalate long-duration requests to your CAB approval group. Need your own logic? Replace validation, approval, or notification behavior - or the entire request flow - with your own Flow Designer subflows, built from shipped templates. Once approved, the request is created in Entitle, and its status is reconciled back into ServiceNow via scheduled polling or real-time webhook events, closing the requested item when access reaches its final state.

Requires a BeyondTrust Entitle tenant and API token. Installs together with the BeyondTrust Entitle Spoke and communicates directly with the Entitle cloud API over HTTPS - no MID Server required.

- **Just-in-time access, natively in ServiceNow**  — users request time-limited access to Entitle roles and bundles straight from the Service Catalog
- **Smart eligibility**  — requesters see only the resources they're eligible for, backed by a cached, auto-refreshing sync with Entitle
- **Approvals your way**  — ServiceNow-native approvals with CAB escalation and no-code Flow Designer hooks at every stage
- **Always in sync**  — status reconciliation via polling and real-time webhooks