Get list of identities with given entitlement

Do you need this rule in IIQ or ISC? In ISC you cannot use context object to find the application and use QueryOptions to filter for the required entitlement.