...
If you create a personal access token for a System Admin account, be extra careful who you share it with. The token enables a user to have full access to the account, including System Admin privileges.
It is recommended to create a personal access token for non-admin accounts.
8 - Copy the access token now for your integration and store it in a secure location. You won’t be able to see it again!
9 - You’re all set! You can now use the personal access token for integrations to interact with your Mattermost server and authenticate against the Mattermost REST API.
...