The above functions need authorization from the enterprise identity administrator before they can be used