end-user provisions