1. A method comprising: receiving, by a computing system, a user request to perform an action on a first entity of a plurality of entities in a repository system, each entity in the plurality of entities having an association with at least one asset in the repository system, wherein an entity includes information about an object stored in the repository system; determining, by the computing system, based on a role of a user associated with the user request, whether the user is entitled to access an asset associated with the first entity; upon determining that the user is entitled to access the asset associated with the first entity, identifying, by the computing system, one or more actions that are permitted for the role based on having an entitlement to access the asset; determining, by the computing system, whether the requested action is a permitted action; and upon determining that that the requested action is a permitted action, performing, by the computing system, the requested action on the first entity.