Скачать или смотреть Delegation: I can do the work on your behalf - IAM

Delegation is like giving permission to someone to do something on your behalf.
Let’s say you have connected to a website using your Google credentials by using the concept of federation.
Now, while using the website you want your daily summary activities to save in Google Drive.
At this point, the website does not have access to your Google Drive because the prior authentication is something like this. You used google credential, google verified and notified to the website with a success message. As the site trusts google, it allows you to use its functionality. Here google just verified your identity. It did not give access to google services. This is federation and federation does not automatically grant permission to access your data.
So, when you choose to save your notes to Google Drive, the site prompts you with a permission request to access your Google Drive. You see a message:
"Note.com wants permission to save files to your Google Drive. Allow?"
You provided your concurrence.
Since the site already has an authentication token from your initial login, it can now use this new permission along with authentication token to access Google Drive on your behalf and save your notes.
This is Delegation—Google is allowing the site to act on your behalf with your permission to put the notes in google drive, but within specific limits.