ability minimum authorize