Regarding the API token, as an Admin you have your own API token which allows you to obtain specific capabilities to enhance your monday.com experience. Once the code is generated, regardless of whether you use it or not, it will remain securely there until you regenerate it. That said, it is okay to generate the API token and have it sit there. In situations where you’ve shared the token i.e. to if you were to involve a partner in your workflow set up, or if there’s a platform bug, that’s when you’d need to regenerate the token.
As for Admin privileges, to be transparent, this is quite dependent on the level of accessibility you want to grant to users… if you know that your users will require app access, it would be helpful to have that selected. That said, in my opinion the other options should be reserved for admins of the account, simply to preserve the privacy and security of the account.