I know this may be closed - but what happens when an Entity is REMOVED from an Entity Type -why does that feature (remove) require elevated privileges?   For example we have an Entity Type called Business Critical Apps and Entity ABC is assigned to that Entity Type and gets a superset of controls.   A few months later that application is reclassified as a Business App (no longer considered critical) and therefore REMOVED from the Business Critical APp entity type and added to the Business App entity type.  What happens to the controls that are mapped to BOTH entity types for entity ABC?    It seems like Entity Types are very stringent and you shouldn't be moving  Entities across different entity types... Is that correct?