A service can call other services in order to meet requests. For this purpose, the service must be able to, if necessary, transfer its usage rights to the called service. (Careful: this leads to a privilege escalation in the services called indirectly!)
A service X can transfer the usage rights to a service Y by registering Y as a delegate service in X's own access object definition.