Currently a user with the Developer Role and an API Key can access all data available via API including user information and there is no option to limit the access to defined functions or non user data.
This leads to issues with granting the Role and access to APIs due to worker council / data privacy topics as the user could access this data so only selected people could get access.
There are many use cases a user would need a API Key (Qlik Data Transfer, Automation via API) without the need of accessing user data (like the Audit API user Events) and for many customers could not get this assigned due to the mentioned regulations on data security / worker council.
Beside an option of what API also a anonymized option would be useful where no user id / names are available.
NOTE: Upon clicking this link 2 tabs may open - please feel free to close the one with a login page. If you only see 1 tab with the login page, please try clicking this link first: Authenticate me! then try the link above again. Ensure pop-up blocker is off.