API users will need to be either a Site Administrator or Team Manger. The roles will denote what they have access to on the system when using the API. This is the access per Role:
Site Administrators - Site, Users, Folders, Permissions, Network Rules and File Log
Team Manager - Users, Folders, and Permissions on the Team.