A mechanism where a user or service account temporarily borrows the permissions of another service account to perform an operation.
Also called impersonation. Because it avoids issuing and distributing a long-lived service account key (a private key file), it's considered a safer approach that temporarily grants only the needed permissions while avoiding the risk of a leaked key.
© 2026 ITBGM