Hi there!

There are 2 types of API token access you can choose from, Full access  or read only.

Full access API token means the API token has all permissions the associated user has for that app. For example, if the user does not have manager or developer permission for an app, the user cannot run a test (which requires developer or manager permissions) even though the user is using a full access API token.

Read only API token means that the user has viewer access. For example, with read only API token, the user can perform actions such as reading data from crashes, analytics, getting basic app information; however, they cannot perform actions such as changing app settings, triggering a build, creating an export config etc.
​