Returns token-level identity for the bearer token. OAuth responses include the user, OAuth application, and active connected business installations for the token. If no active connected business remains, the endpoint returns 403 without identity data. Business-scoped API requests still resolve one selected business installation per request.