As the discussion thread REST API -Invalid grant started by Kurt Semba has already been locked by some Soti moderator, I'm left with no option but to add a new discussion thread as a continuation of that thread to post extra information related to the discussions posted.
Hi Kurt,
It may be Ok to assign your new account to be "Administrator" for initial test in a demo platform. However, for security reasons on production server, I would recommend customizing your API-user account only with the REQUIRED global/per-device-group permissions rather than using the super-administrator with ALL global/per-device-group permissions granted. In the latter case, If your token is stolen or the app binary is run from outside your corporate network, it might be too dangerous to allow the app/api-user account to do everything like a super-administrator. With only restricted permissions on a need-to-use basis, you can minimize potential risk when the token or app/app-binary is stolen or hacked.