users with authorization