Users should be able to generate API keys with the same permissions as themselves.
That, or we really need to be able to restrict companies. We can restrict to only 1, but not ALL but one, and restricted API keys cannot create new.
This would be extremely helpful for import scripts made for techs to run while moving documentation platforms. It'd show who made the assets, and prevent them from seeing restricted companies, while still being able to create.