Delegation of authority allows someone to act on another's behalf to perform tasks or access resources. It involves assigning roles or attributes to users that provide access permissions. Using a delegation issuing service centralizes the record of delegations according to an organization's policy, simplifying privilege checking and removing the need for individual user signing keys. It provides an efficient audit trail of who has delegated what privileges to whom.