API security
Delegated Access
Delegated access is the model in which a user or system authorizes an application to act on its behalf within a controlled perimeter.
Definition
Delegated access is the principle by which an application receives a bounded right to call a resource or API for a given user, service, or technical subject. The delegation is constrained by explicit authorization decisions such as scope, audience, duration, and policy.
The Ariovis perspective
API security should keep authentication, token issuance, authorization and secret management distinct. Each control has a different role and must be designed around the actual caller and resource.
Related services
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.