> For the complete documentation index, see [llms.txt](https://docs.octoxlabs.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.octoxlabs.com/adapters/adapters/beyondtrust-entitle.md).

# BeyondTrust Entitle

## Connection Requirements

### 1 - Domain

The API host for your Entitle tenant. In most deployments this is `api.entitle.io`. Change it only if BeyondTrust has provisioned a dedicated API endpoint for your organization.

### 2 - API Token

A personal or service API token generated from the Entitle admin console. Navigate to the **Tokens** section, click **Add**, choose **API token**, provide a token name (2-250 characters) and an expiration, then click **Reveal token** to copy the value. The token is sent as a Bearer token in the `Authorization` header.

### 3 - Proxy

Optional. Use `host:port` format if the connector must reach `api.entitle.io` through an outbound HTTP proxy. Leave empty for direct connections.

### 4 - Timeout

Optional. Request timeout in seconds. Increase this if Entitle responses are slow under load. (default: 30)

{% hint style="info" %}
**Default Values**

* **Domain**: api.entitle.io
* **Proxy**: empty
* **Timeout**: 30 seconds
  {% endhint %}

{% hint style="danger" %}
**Permissions Required**

The API token must have read access to the `/public/v1/users` endpoint. Create the token from an account that can list all users in the Entitle tenant so the connector can fetch the complete user inventory.
{% endhint %}