API users are added to Roles where the system admin can control the access that API user has.
Top Left Menu >> Setup >> API
From the Setup page (right side) click API.
Click + Add an API User.
Give the User a Role.
Give the User a Name and the select Finish.
After the user is created an API key will be generated.