Abstract: Techniques for authorization scope management delegation are described. An administrative user provides access scope information to be utilized for one or more users of a cloud provider network. The access scope information is utilized by an identity service of the cloud provider network in generating access tokens that can be utilized when accessing resources managed or hosted by services of the cloud provider network, whereby one or more services can use the scope information that was pre-configured by the administrative user during the execution of operations for individual users without the users needing to provide or confirm the scopes.

Abstract: A managed directory service obtains a request to generate a first account of a first directory within a first network. In response to the request, the managed directory service creates the first account within the first directory. From the request, the managed directory service also obtains credential information of a second account of a second directory within a second network. The managed directory service updates the first account to include this credential information to enable the first account to be used to access the second directory within the second network.