Immich → Account Settings → API Keys

All — or: user:read, asset:upload, asset:read, album:read, album:create, album:update