API access needs to be assigned to ONE user only. This user will serve as the API admin and can share API keys internally, as required. This is done for compliance and throttling purposes.