Abstract: Techniques are disclosed relating to authorizing varying levels of access to computer resources. In one embodiment, consider an authorization server, a resource server that includes a resource (for example, a data item), and an application server operable to incorporate the resource into its own functionality. The authorization server may receive information indicative of a grant of access privileges by a user, authorizing the application server to access the resource. The authorization server may be configured to provide the application server with varying levels of access to the resources of the resource server. For example, the authorization server may provision a plurality of access tokens corresponding to the grant of access privileges to the application server. The plurality of access tokens may each be associated with a scope of access and a duration. In various embodiments, the duration of an access token may be based on its corresponding scope of access.