Currently, the Helpjuice API uses a single API key for authentication, which grants full permissions (Super Administrator access). This approach does not follow the best practices of least privilege, as it requires customers to either grant full access or rely on workarounds like proxy servers to implement more secure, permission-based access. Requested Features: Ability to create API tokens with scoped permissions, allowing customers to restrict access to specific resources (e.g., read-only access, limit access to certain articles or categories). Option to configure custom API roles with granular access, following the principle of least privilege. More control over the permissions granted to API keys, ensuring they are tied to the access level of the associated user. This feature would significantly improve security and flexibility for customers using the Helpjuice API in more complex, secure integrations.