Currently Explo supports two types of API Token permissions, read-only and read-write. Granting a token read-write permissons will allow it to create, delete, and edit any end user group in its access group, while granting a token read-only permissions will only allow it to pull those end user groups.