In our current setup we see that users can be provided entitlements via a business rule or via a Product or Delegated form.
In this case it is possible that someone can remove an entitlement that has been added by a business rule.
We would like to see that users that have entitlements granted via a Business Rule are grayed out to be managed via SA.
Simular to the Manage Resource Memberships in IAM.