With the client credentials issued to your integration. The client decides whose sandbox data you see.