If an OAuth application is granted right X, it will only be able to use it if the granting user have that right. In a few cases it would be useful to have some kind of "supergrant" where this limitation does not exist. The main use case is IP-related rights such as noratelimit or ipblock-exempt (which the user normally does not need and/or is not trusted with, but the application, while using its own IP, can run into problems the user would not).