With API tokens, you can programmatically interface to the Certificate Hub API.
Each API token is associated with the user who created that token. Therefore, all actions taken through the API are associated with that person and inherit the person's roles.