...
Integration Users should only be given the permissions needed to function. They should not be given permission sets.
In extreme cases where integration requires a permission that grants overly broad access, a more limited invisible permission may be considered.
See Integration usersfor more information