It was in user level before, so I pass it to get the authorization from the domain controller. I could pass it back to user level thought.