I've run into a situation that I've found can be avoided if I manually
change the value of a DirXML-EntitlementRef attribute value directly on
a user object in an LDAP browser from

cn=NOVLGGLEUSER-Account,cn=Google Apps
Driver,cn=IDM-Driverset,o=services#1# <etc..>

to

cn=NOVLGGLEUSER-Account,cn=Google Apps
Driver,cn=IDM-Driverset,o=services#0# <etc..>

Note the change from #1# to #0#.
I want to do this on hundreds of users so looking for a way to automate
it using driver code or any other means.

Any help much appreciated.