portfolio authorization