I am unable to add entitlements to IT role

in my setup.

memberof is type String and properties: managed,entitlement,multi-valued

managed

This properties selection makes the groups will be listed under Entitlement Catalog.

entitlement

This properties make the group as an entitlement(access right) and make it available for IT role under entitlement section.

Marking an attribute as an entitlement indicates that this is an access right.

Multi-valued

“Multi-valued” refers to an **attribute that can hold more than one value.

Document reference: propertiesofattributes

small note: after attribute property changes, re-aggregate the data.