...
Under what circumstances would one use eduPersonEntitlement rather than LDAP group membership to indicate specific access privileges?
answer to be developed .... any MACE Dir community members are welcome to take a crack at this!
See also
Practices in Directory Groups (2002)
spaces.at.internet2.edu/display/macedir/MACE-Dir+Working+Group+Space?preview=/2309/98307063/Practices-in-Directory-Groups_BartonT_2002_letter.pdf
...