...
Select Settings in the Tempo sidebar.
Select Permission Roles in the Data Access section.
Click + Add permission role at the upper-right.
Enter a name for this permission role, and select the permission View Worklogs.
Click + Add users in the Role users row, then select the users to whom you permit to create a token with permission View worklogs.
Select the value Full in the Role access row.
When you're done, click Save to save the permission role.
...
Step 2: Getting Tempo Token (only for users who were added in Step 1)
Select Settings in the Tempo sidebar.
Select API Integration in the Data Access section.
Click + New Token at the upper-right.
Enter a name for this new token, and select a value in the Expiration (recommended 5000 days).
Select Custom Access and select View worklogs in the Worklogs scope section.
Click Confirm, and copy the Token.
...