| Name | Type | Description | Notes |
|---|---|---|---|
| permissions | List<DelegationTokenPermission> | Permissions to keep while the delegation token is applied. These must be a subset of the caller's current permissions for the site and cannot include ADMIN. | |
| onBehalfOf | DelegationTokenPrincipal | [optional] | |
| reason | String | Reason the delegation token is being generated. Stored in the signed token for audit/support traceability. |