An entity is a Bag or a Recipe.

Configuring what certain roles can do to entities is done with Entity Access Control.