You need to register an app in SharePoint in order to authenticate against it. That app that you register needs to be given permissions to your SharePoint Online.

Here is the document for grant access to SharePoint app only

https://global-sharepoint.com/sharepoint-online/in-4-steps-access-sharepoint-online-data-using-postman-tool/