authorize and manage