I want to write a script to call user management API to manage users.

I do not want to give full blow admin rights to the API Token and want limit privileges to Help Desk Admin Role.

How do i create a token with only Help Desk Admin Privileges?

I created a service id and assigned Help Desk role, but this id cannot create a token.

Am i suppose to assign Administrator role to service id, create the Token with the service id and once done, lower the service id to Help Desk privileges ?

thanks