Enterprise user access discovery and management using policy and entitlement framework

A method for discovering membership groups to access enterprise applications, the method comprising:

• creating, via a discovery application running on a computing device, one or more entitlement rules specifying computing resources for accessing enterprise applications within a membership group;
• creating, via the discovery application, one or more blocking rules corresponding to each of the one or more entitlement rules in response to creating each entitlement rule, wherein the one or more blocking rules are configured to restrict access to one or more of the enterprise applications within the membership group for a subset of one or more users in the membership group;
• receiving, via the discovery application, user input from a user, wherein the user is included in the subset of one or more users in the membership group, wherein the user input identifies at least one of an application name, a server name, or an Internet Protocol (IP) address associated with a computing resource for accessing an enterprise application, and wherein the computing resource is one of the computing resources within the membership group and the enterprise application is one of the enterprise applications within the membership group;
• comparing, via the discovery application, the user input to application information stored in a database accessible by the discovery application;
• sending, via the discovery application, a message to the user in response to determining a match between the user input and the application information, wherein the message identifies the membership group containing the computing resource for accessing the enterprise application;
• and
• enabling the user to access the enterprise application using the computing resource based on the one or more entitlement rules while restricting the user from accessing at least another one of the enterprise applications in the membership group based on the one or more blocking rules.