Can we confirm and add what API Key permissions are required? recent POV we added all permissions to get coverage but would like it better defined