authorization capabilities expanded