When issuing a token, an address controlled by the Issuer can be assigned to be the Authority Manager, which has role based permissions to perform (and delegate to other accounts):
Delegating Authorities
Last updated 2 months ago