My team is planning to use multiple API keys based on customers in the application, but all API Key now must be associated with one user.

In the first phase, we'll make Google Workspace Group for impersonation, but it is a little troublesome to switching user, and while using this strategy, I think we cannot enable SAML for the account.

I can imagine it's hard to design the permissions for permission managements, but I need this in some form. For my case, I believe it's enough it can be managed by Admin (or new some specific role).