please share with me some documents about creating authorization step by step(profile, authorization, authorization object, role, etc). tanks a lot.