Administrators can authorize applications to use their account but with permissions based on the grants they give.