Identities can be assigned entitlements to different objects, such as, groups, accounts, roles, or applications. By assigning entitlements to a location you avoid having to assign entitlements separately to each identity because all the identities are automatically assigned to the location.