...
Designing around with services is always a choosing with side of the line has ownership of a problem. If the problem of mapping Agents to Resources doesn't belong to the Authorization OSID, then maybe it's a problem for Resource (as what is implied by its definition).
Deeper into the Resource Can
...