requirements and authorization