GitLab acces token scopes

For full functionality, you can select "api" scope. 

You can also use "read_api" for read-only access, but then you wouldn't be able to trigger builds from the app.