Methods, apparatuses, and computer programs for providing access to a subset of a resource managed by an entity of a mobile communication network

An apparatus for a network, the apparatus comprising:

• at least one processor;
• at least one memory storing instructions of a responder entity of the network which, when executed by the at least one processor, cause the apparatus to perform at least:
• receiving a service request for a service operation on a specific resource managed by the responder entity from an initiator entity of the network, said service request comprising at least one resource filter specifying a set of resource instances of the specific resource that the service operation is to be performed on and an authorization token, said authorization token designating authorization of the initiator entity to request the service operation on the set of resource instances specified by the resource filter;
• performing the service operation on the set of resource instances based on the service request;
• and
• sending a service response to the service request for the service operation, said service response comprising a result of performing the service operation on the set of resource instances specified by the at least one resource filter.

An apparatus for a network, the apparatus comprising:

• at least one processor;
• at least one memory storing instructions of a repository entity of the network which, when executed by the at least one processor, cause the apparatus to perform at least:
• receiving an authorization request for authorization for an initiator entity of the network to request a service operation on a specific resource,
• determining, based on authorization data, that the initiator entity is authorized to request the service operation on the specific resource, said authorization data comprising mappings between initiator entities and resource instances of resources, said mappings comprising a mapping between the initiator entity and resource instances of the specific resource, and
• sending an authorization response to the authorization request for authorization for the initiator entity to request the service operation on the specific resource.