Processing a plurality of packets through at least one service, a privilege granter monitors at least two authentication packets to obtain a source unique network identifier, one of which does not have a vendor specific attribute and detects an authentication packet among the at least two authentication packets, and the authentication packet having the vendor specific attribute. The privilege granter receives at least one response authentication packet having at least one service definition identifier, the service definition identifier corresponding to the source unique network identifier, responsive to detecting the authentication packet having the vendor specific attribute and builds an entitlement database to pair the source unique network identifier to the service definition identifier. The privilege granter receives a session packet and determines that the source unique network identifier corresponds to a user entitlement in the entitlement database. The privilege granter routes the session packet to an addressable service.