Authorization token including fine grain entitlements

A method of generating an authorization token, the method comprising:

• generating an allowed function bitmask used to identify allowed functions associated with subscriber elements, respectively, associated with a subscriber of a telecommunication provider, the allowed function bitmask comprising groups of bits in a plurality of bits, the groups of bits having values indicating whether telecommunication service attributes are included in the subscriber elements, respectively;
• generating an entitlement representation based at least in part on the allowed function bitmask;
• and
• adding the entitlement representation to a body of an authorization token.

A server of a service, the server comprising:

• one or more processors;
• a communication connection;
• and
• memory storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• generating an allowed function bitmask for a subscriber element, the allowed function bitmask comprising bits at a plurality of bit positions that are set to values indicating whether the subscriber element has attributes associated with each of the plurality of bit positions on a predefined attribute list;
• converting the allowed function bitmask to an allowed function value;
• adding the allowed function value in an entitlement representation;
• adding the entitlement representation to a body of an authorization token;
• and
• signing the authorization token.