Magento 2 - Minimum User Permissions

When you create a new Magento user to enable API access for your DropStream Store, we recommend that you grant it access to all role resources.

However, if the role resources must be limited, the following are the minimum resource permissions required for integration:

• Core > Store > List of stores
• Sales > Order > Change status, add comments
• Sales > Order > Retrieve orders info
• Sales > Order > Order shipments > Create
• Sales > Order > Order shipments > Comments
• Sales > Order > Order shipments > Tracking
• Sales > Order > Order shipments > Retrieve shipment info
• Sales > Order > Order shipments > Send shipment info
• Catalog > Inventory > Update
• Catalog > Inventory > Retrieve stock data

Next: Allow OAuth Access Tokens To Be Used as Standalone Bearer Tokens