---
title: Membership and Entitlements
slug: membership-and-entitlements
createdAt: 2025-08-04T01:43:58.377Z
---

## Role Membership

Roles in Activate can include the following object types:

- **Users**
- **Contacts**
- **Computers**

This flexibility allows you to manage entitlements consistently across different identity types within the organisation.

## Role Entitlements

Roles can have **default entitlements** assigned to ensure that members automatically receive the correct access when added.

### Examples of Default Entitlements:

- **DefaultUserGroup parameter** – Automatically adds a user to a specified Active Directory group upon role assignment.

When integrated with **Activate Role Manager**, entitlement assignment can be extended to include:

- Service Catalogue Items (Services)
- Distribution Lists
- Security Groups
- Folder permissions
- SharePoint access
- User attribute updates

## Key Implementation Notes

- Use **Static Roles** for business structures such as departments or locations.
- Use **Dynamic Roles** for system-driven access based on external data sources (e.g., Active Directory).
- Use **Target Roles** for security and context-based access control scenarios.