Enable read and write scopes for the installed packages which is the minimum permission required to access the installed packages.
Create an API user and assign Administrator role to the user which is the minimum permission required to access the APIs. For more information, see
Assigning administrator role to users.