The mdm authorizer for tem