Abstract: The present invention relates to a method, apparatus, computer program product and computer program element for enabling differentiated control point access to services provided in a computing environment, a method, computer program product and computer program element for providing access to a control point from a media provision entity in a computing environment and a network of computing apparatuses. A media provision entity (12) in the network comprises at least one logical device (24, 26) that provides at least two different sets of permissions in relation to assets (36) associated with the entity. A security console (22) registers a control point (20) in or for the at least one logical device in order to provide access for the control point to the apparatus for rendering services. In this way control points can receive different rights on an asset-by-asset basis without changing the connectivity model used in the network.