What does the API token get access to?

When creating an API token, the level the token was created at is the level it will be granted access to.

So, for MSSPs that have a parent/child relationship and manage multiple environments, as long as the token is created at the parent level it will be granted access to all child environments along with any shared environment including all global objects.