A method for managing authorization in digital rights management, DRM, comprising: receiving, by a first server, from a second server, a drop domain authorization trigger message for an initiation of an authorization protocol for disabling an authorization to create a domain rights object, RO, for a domain for which authorization to create a domain RO has been issued to the first server by the second server, the drop domain authorization trigger message including information on the domain, wherein information on the domain is an identity, ID, of the domain; further to receiving the drop domain authorization trigger message, checking, by the first server, whether or not the first server has dropped the authorization to create the domain RO for the domain; transmitting, by the first server, to the second server a drop domain authorization request message including the identity of the domain, a reqID parameter indicating an identity of the first server, a resID parameter indicating an identity of the second server, and a signature, wherein the drop domain authorization request message further includes a not-authorized element which indicates that the first server does not have authorization to create the domain RO for the domain if the checking determines that the first server has dropped the authorization; and receiving, by the first server, from the second server, a drop domain authorization response message in response to the drop domain authorization request message, the drop domain authorization response message including a status element indicating whether the processing of the drop domain authorization request message is successful or not. receiving, by a first server, from a second server, a drop domain authorization trigger message for an initiation of an authorization protocol for disabling an authorization to create a domain rights object, RO, for a domain for which authorization to create a domain RO has been issued to the first server by the second server, the drop domain authorization trigger message including information on the domain, wherein information on the domain is an identity, ID, of the domain; further to receiving the drop domain authorization trigger message, checking, by the first server, whether or not the first server has dropped the authorization to create the domain RO for the domain; transmitting, by the first server, to the second server a drop domain authorization request message including the identity of the domain, a reqID parameter indicating an identity of the first server, a resID parameter indicating an identity of the second server, and a signature, wherein the drop domain authorization request message further includes a not-authorized element which indicates that the first server does not have authorization to create the domain RO for the domain if the checking determines that the first server has dropped the authorization; and receiving, by the first server, from the second server, a drop domain authorization response message in response to the drop domain authorization request message, the drop domain authorization response message including a status element indicating whether the processing of the drop domain authorization request message is successful or not.