An electronic token useable for controlling access to a resource is described. The token includes a token grantor identifier indicating a token grantor, a token grantee identifier indicating a token grantee, and a resource access control field. The resource access control field indicates control of additional limitations of token grantee access to a resource as specified by the token grantor. A method for generating and using the electronic token includes generating an electronic token based on a token grantee identifier, a token grantor identifier, and a resource access control field, wherein the resource access control field indicates control of additional limitations of token grantee access to a resource as specified by the token grantor. The electronic token is transmitted to a token grantee computer system. The token grantee computer system transmits the electronic token to a computer system controlling access to a resource requested by the token grantee computer system.