Zscaler Client Connector provides users access to Internet & SaaS, Private Applications, Digital Experience Monitoring, and Zscaler Deception services. Zscaler Service Entitlement allows you to select which group of users or device groups can enroll into the Private Applications, Digital Experience Monitoring, or Zscaler Deception services. By default, Internet & SaaS enrollment is always enabled for all users.

On the Zscaler Service Entitlement page, you can configure selective entitlement to:

• Enable Private Applications for only a select group of users.
• Configure Private Applications machine tunnel for all devices.
• Enable Digital Experience Monitoring for a select group of users.
• Enable Zscaler Deception for a group of users.
• Enable Private Applications for Device Groups.
• Enable Digital Experience Monitoring for Device Groups.
• Enable Internet & SaaS for Device Groups.
• Enable Zscaler Deception for Device Groups.

If you do not see the Zscaler Service Entitlement page in the menu, your organization may not have the proper subscriptions.