code: def entitlement(self, token):
          
          headers = {"Authorization": "Bearer %s" % token}
          url = self._realm.client.get_full_url(
              PATH_ENTITLEMENT.format(self._realm.realm_name, self._client_id)
          )
          return self._realm.client.get(url, headers=headers)
docs: Client applications can use a specific endpoint to obtain a special
          security token called a requesting party token (RPT). This token
          consists of all the entitlements (or permissions) for a user as a
          result of the evaluation of the permissions and authorization policies
          associated with the resources being requested. With an RPT, client
          applications can gain access to protected resources at the resource
          server.
  
          http://www.keycloak.org/docs/latest/authorization_services/index
          .html#_service_entitlement_api
  
          :rtype: dict