As a new user I could only add 1 image to the post so here’s additional info.
They key uses a service account, which has the default reader role and has most permissions.
