Requirements for authorization