Authorization, base object and list of instances