func (o *OAuthService) ExchangeToken(ctx context.Context, params *TokenExchangeParams) (*TokenSet, error)

delegatedTokens, err := client.OAuth.ExchangeToken(ctx, &avnologyid.TokenExchangeParams{
    SubjectToken:     userAccessToken,
    SubjectTokenType: "access_token",
    ActorToken:       adminAccessToken,
    ActorTokenType:   "access_token",
    Scopes:           []string{"openid", "profile"},
})
if err != nil {
    var insufficientScope *errors.InsufficientScopeError
    if errors.As(err, &insufficientScope) {
        log.Println("Client missing token_exchange scope")
        return
    }
    log.Fatal(err)
}

// The token's `act` claim records who is acting
fmt.Println("Acting as user:", delegatedTokens.AccessToken)