1. A method comprising: receiving, by a computing system, a user request including a query specifying one or more criteria indicating a plurality of entities to which to perform an action, wherein the plurality of entities are included in a repository system, each entity in the plurality of entities having an association with at least one asset in the repository system, wherein each entity in the plurality of entities includes information defining a different computing object of a plurality of computing objects in a computing environment of an enterprise, wherein the plurality of computing objects includes at least one of a computing device or an application, and wherein each of the at least one asset corresponds to a respective collection of entities in the plurality of entities; determining, by the computing system, based on a role of a user associated with the user request, one or more assets the user is entitled to access, wherein the one or more assets are associated with one entity in the plurality of entities; modifying the one or more criteria of the query to include at least one additional criteria, wherein the at least one additional criteria indicates one or more entities to which the action is not to be performed, the one or more entities being included in the plurality of entities, wherein the one or more entities are not associated with the one or more assets the user is entitled to access; upon determining that the user is entitled to access the one or more assets associated with the one entity in the plurality of entities, identifying, by the computing system, one or more actions that are permitted for the one or more assets by the role based on having an entitlement to access the one or more assets, wherein the one or more actions that are permitted for the one or more assets are permitted to be performed on each entity of the plurality of entities associated with the one or more assets; determining, by the computing system, whether the action is a permitted action being included in the one or more actions permitted to be performed on each entity of the plurality of entities associated with the one or more assets; and upon determining that the action is a permitted action, performing, by the computing system, based on the modified one or more criteria, the action on the plurality of entities excluding the one or more entities.