We had an access token set up previously under a different user and they had the Administrator role listed so im assuming it can be done