...
The authentication against ADO is currently done via a PAT (Personal Access Token). It requires the Read, Write & Manage permission on Work Items.
We recommend that you create a service-account which only purpose is to be used with the piplanning app.
Check this page on how to obtain the PAT of an ADO account: Obtain PAT
...