Application authentication (acts on its behalf)

An application acting on its own behalf only has access to associated elements.

Depending on the available scopes and ACLs, it may or may not have access to specific services and objects.