[dwattttt]

"Admin"'s identity is the resource you're asking permissions to use. If don't want identities, are you going to manually authorize every file that needs to be interacted with? For a recursive delete of thousands of files?

[LudwigNagasena]

You would authorize deletion in a specific directory.