1. A method for controlling access, comprising: detecting an entitlement event for a first user; sending an authorization message to a second user having control of entitlement access for the first user; and confirming authorization for the first user based on the second user.