Application authentication (acts on behalf of the user)

An application acting on behalf of a user has access to associated elements as well as the user’s elements.

Depending on the available scopes and ACLs, it may or may not have access to specific services and objects.