If a facility or party is licences/authorized interdependently of the product there needs to be a way to create the association, this is done via RegulatedAuthorization.subject for many products and service but the list is incomplete.