Currently under global settings, we can create API token with Full access / Read access. It will be good if we can select the collection for each API tokens.