Your development team has built a structured API for retrieving vehicle data and wants to enable third-party development of dealership tools using this vehicle event data. You need to implement delegated authorization for this data.

What should you do?