An authorised person is either someone who means to carry out dealings, has been trained in the Part C behavioural requirements, has signed, dated and handed the holder a record of that training, and has not been excluded on the Regulator's direction; or someone (or a class of people) who will not carry out dealings but has permission to enter from the holder, the facility manager or another of the holder's representatives.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.