jetstream api tokens permission

I am trying to understand how jetstream works and use that as a base for a future project.

you can change the permission of the api tokes, but how can i set that at lease one permission is required on update.