Abstract: Techniques for authorization scope management delegation are described. An administrative user provides access scope information to be utilized for one or more users of a cloud provider network. The access scope information is utilized by an identity service of the cloud provider network in generating access tokens that can be utilized when accessing resources managed or hosted by services of the cloud provider network, whereby one or more services can use the scope information that was pre-configured by the administrative user during the execution of operations for individual users without the users needing to provide or confirm the scopes.