...
3. After all permissions were added (a complete list is: read_customers, read_discounts, read_gift_cards, read_inventory, read_orders, read_products, read_product_feeds, read_price_rules, read_content, read_customer_events, read_locations, read_marketing_events, read_online_store_navigation, read_online_store_pages, read_product_listings, read_returns), switch to API credentials tab and install app to generate the access token.
...