This is related to the need from Certification of Entitlements that are part of a Role
We need to create campaigns for users but do not want to include Entitlements that are covered under a user’s Role. The idea was to use a script to determine what entitlements are not granted by Role membership and create a campaign for each user with that limited scope.
I did not see an API for this, but another solution would be to generate a campaign like normal and then programmatically update the campaign to maintain entitlements that are covered under the role.