What access does the integration token have?

The same as the Fixflo user who created it. We suggest creating it from a user set up for the integration, with only the access it needs.