Abstract: Techniques for enabling a service to perform operations corresponding to a subject tenancy on behalf of a governing tenancy are disclosed. The system receives a request from a service for a resource principal token. The request includes a resource principal, a service identifier for the service, and a link identifier that identifies a governance link. The governance link is associated with a governing tenancy, a subject tenancy, and a service. The system evaluates the governance link to determine if the governance link is active. After determining that the governance link is active, the system responds to the request from the service, providing a resource principal token. The resource principal token that is provided to the service forms a basis for authorizing the service to perform operations corresponding to the subject tenancy on behalf of the governing tenancy.