The written authorisation must state the nature and extent of the agency access approved, taking into account time and day of the week, location, and whether access is local or roaming.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.