A method and entity of authorizing in a communication system are disclosed. The method includes using authorizing data to reference other data to define an authorization associated with the other data. The authorizing data includes one of a data component, data group, or data element. Further, a user profile can be provided and includes a user profile data component and an authorization data component. The authorization data component or the user profile data component references another authorization component. Access is authorized to data associated with the user profile data component in accordance with the authorization data component.