L2 Platform entitlement profile
L2 enables Workspace, Tenant Admin, Approval Center, Page-Agent approval writes and Deployment gates; L3-only deep-work remains locked.
WorkspaceFull
Page-AgentApproval
Deep-workLocked
Define enabled, optional, approval-required, restricted and locked capabilities for each package.
L2 enables Workspace, Tenant Admin, Approval Center, Page-Agent approval writes and Deployment gates; L3-only deep-work remains locked.
User can use the capability immediately.
Tenant can enable with admin setup.
Action requires human review.
Package upgrade or policy change required.
Public package comparison and upgrade path.
Admin role and connector access enforcement.
Skill cards show package eligibility.
Action chips show locked/restricted state.
Page-Agent, Finance Edge and Deep-work enforce rules.
Entitlement decisions become evidence.