Issue Summary

As a user with varying access on multiple sites, would like the ability to create API tokens specifically for single site access. 

Expected Results

Currently, a user belongs to Site 1 (as a site admin) and to Site 2 (as a normal user). They share the same API token. 

Want the ability to generate a token so that user can be used only for Site 2 (giving access only as normal user). Don't want that same token/user to have admin access to Site 1. 

Actual Results

The current design of the API token, is such that it is tied directly to a user's current site/product permissions. 

Workaround

Create separate accounts for each site and create API tokens for each.