When interacting with GraphQL APIs, depending on the call, you will need to use
A master token obtained from the Tray Embedded UI (required for calls such as 'Get Users')
A user token obtained with Create user token (required for calls such as 'Get Soluton Instances')
Some calls like Get Authentications support both master and user token where using a master token gives all auths in your orgnaziation workspace while a user token only gives auths owned by that end user.