Roles

A key carries a role (viewer, contributor, editor, or admin) and can never be given more access than the person who created it has. Pick the smallest one that does the job: a key that only reads analytics has no business being able to publish.