What is important in this issue is that we decide on roles/permissions that will allow the Variant operator to get tokens and be authenticated by the UPS Api

A possible solution is that we might create a service that doesn't really authentication so that the operator can talk to it UPS directly. This way the operator doesn't need to know the token.