1. A method comprising: receiving an entitlement request from a user seeking entitlement permission; retrieving entitlement rules and roles from a metadata repository; matching the entitlement request against the entitlement rules and roles; and granting the entitlement permission when the entitlement request satisfies the entitlement rules and roles.