Fhi @Amirhosseiin what you are looking for is token exchange / impersonation. we have an implementation for that, but from the top of my head it is currently only implemented for project roles, and not for the internal role management of ZITADEL itself. https://zitadel.com/docs/guides/integrate/token-exchange
The Token Exchange grant implements RFC 8693, OAuth 2.0 Token Exchange and can be used to exchange tokens to a different scope, audience or subject. Changing the subject of an authenticated token is called impersonation or delegation. This guide will explain how token exchange is implemented inside ZITADEL and gives some usage examples.
