It would be very helpful to have the ability to create API keys which are limited to a subset of the access of the user creating them. For instance: Read-only access Access to make only specific changes (ie. update policies only, but the more granular the better) Access to only specific orgs This is especially critical for MSP users and companies using SSO authentication. For instance, as a MSP users with "Admin" access I would not want to create an API key with that same level of access if at all possible, but I have no way to create an API key that has anything less. Additionally, because SSO authentication is enabled I have no ability to create a new more limited user under whom a new key could be added. Thanks!