Create user with permissions through curl v5

i see i can create a global user through api/admin/users.
what role/permission does this user get by default?
how can i change it (viewer/editor)?
is it only through folder permissions if i don’t use a team?
and what should be the Authorization token if you say "API Tokens are currently only linked to an organization and an organization role."
thanks!