Section: 8.4 Authorization
Content: The 5G system shall allow the operator to authorize an IoT device to use one or more 5G system features that are restricted to IoT devices. The 5G system shall allow the operator to authorize /de-authorize UEs for using 5G LAN-type service. NOTE: When a UE is de-authorized from using 5G LAN-type service, it is removed from all 5G LAN-VNs. Based on operator policy, before establishing a direct device connection using a non-3GPP access technology, IoT devices may use 3GPP credentials to determine if they are authorized to engage in direct device connection. Based on operator policy, the 5G system shall provide a means to verify whether a UE is authorized to use prioritized network access for a specific service. A 5G system with satellite access supporting S&F Satellite operation shall be able to support mechanisms to authorize a UE to use the S&F satellite operation. A 5G system with satellite access shall be able to support mechanisms to authorize the UE-Satellite-UE communication, based on e.g., location information and subscription. NOTE: UEs can use satellite access directly or via a relay UE (using satellite access assuming that the 5G system with satellite access is authorized to assign spectrum resources for the communication between remote UE and relay UE).