A resource owner is an entity that has the authority to grant access to a protected resource and is often a user or client who owns the data or service in question. In the context of OAuth, the resource owner typically delegates access rights to third-party applications through the authorization server, ensuring secure and controlled resource sharing.