add authz right for engine