environment authorization