There are two types of association that a user can have with the institution in order to manage it.

Institution Editor – it is the default association type. An editor inherits permissions in a top-down manner, meaning, that the editor can edit data of an institution and of every sub-institution in its lower structure tree. 
Institution Administrators – is the most important type of association. An administrator has the same permissions as an editor, but additionally has access to extra functionalities such as: can edit the institution structure, nominate editors for an institution and for every sub-institution in its lower structure tree, and can request an API Token to access Authenticus API

A user can request to become an institution administrator or editor using an interface available at user profile. After authentication in Authenticus, user should go to: Groups → Institution Admin/Editor → Request to be Admin/Editor of an Institution.
The request is sent to Authenticus Managers that decide whether or not the permissions for this institution should be granted. Authenticus Managers verify the request, eventually by enquiring directly the institutions whether the user is credible to manage the institution profile.
In case the institution has associated an institutional administrator, then he/she can delegate a new editor for an institution and of every sub-institution in its lower structure tree.