Hi Kurt,

It may be Ok to assign your new account to be "Administrator" for initial test in a demo platform. However, for security reasons on production server, I would recommend customizing your API-user account only with the REQUIRED global/per-device-group permissions rather than using the super-administrator with ALL global/per-device-group permissions granted. In the latter case, If your token is stolen or the app binary is run from outside your corporate network, it might be too dangerous to allow the app/api-user account to do everything like a super-administrator.  With only restricted permissions on a need-to-use basis, you can minimize potential risk when the token or app/app-binary is stolen or hacked.