Abstract: A technique is directed for managing entitlements within a real-time telemetry system. In an embodiment, access to entitlements is organized between an entitlement management service and an entitlement retrieval service. The entitlement management service may permit users to manage users and roles. The entitlement retrieval service may retrieve logged-in user's entitlements on a restricted basis using the information in an authorization token. The system may maintain separation between the entitlement management application programming interface (API) and entitlement retrieval API within the entitlement service, such that separation between entitlement management APIs, entitlement retrieval APIs, and entitlement enforcements may be enforced.