Need additional understanding of Privacy Rules for Data API

[clay.cash]

Hi -
I am using the data API and I am using token authentication. I am trying to execute a Patch (update) http request.

The manual states:

and then

First, my understanding of the token is that they are an admin with full access. When I attempt to run a patch from Postman, I get an error unauthorized error unless I setup a privacy rule. However, I am struggling to get privacy rules working effectively. The ONLY way I have found requires me to turn on full access to everyone else. I am sure I must be missing something about how privacy rules work.

Any guidance would be greatly appreciated!
Thanks - Clay

[clay.cash]

This turned out to be unrelated to privacy settings. Fixing Auth settings in Postman resolved.