The tasks to authorize users access to grid resources and to authorize their regulated consumption is studied and some key functionality is identified. A novel authorization infrastructure is proposed by combining the Virtual User System (VUS) for dynamically assigning local pool-accounts to grid-users and the SweGrid Accounting System (SGAS) for grid-wide usage logging and real-time enforcement of resource pre-allocations.