After obtaining an access token, you can authorize your API access by including the token in the Authorization header of your requests: 
Authorization: Bearer <access_token>
Make sure that you are using the access token for API operations, not the refresh token. The function of the refresh token is only to obtain new access tokens and to revoke access entirely.