Managing BAM authorization