The access authorization from the resource owner is expressed in the form of an authorization grant.
The client gets a grant and uses it to request access token (except in the implicit grant that send directly an access token)