Giving and removing consent

Delegate permissions

A dashboard for third-party access to an account (for example, a Google account). A third-party app called Scheduler can view, edit and remove entries in your calendar.

Description

A person gives someone else, or third-party software, the authority to act on their behalf.

For example, giving an app permission to view, edit and remove entries in your Google calendar.

Advantages

  • People can still access a service with the help of someone they trust.
  • People get the value of combining multiple services in a new way.

Limitations

  • Easy to forget delegated permissions were set.
  • If permissions are broad they might lead to data being used in a way that people might not be aware of.

Examples

  • OAuth →

    An open standard for delegating access between services.

  • IFTTT →

    Gives a way to get apps and devices talking to each other.

Related patterns