# CreateApiKeyRequest
## Properties
Name | Type | Description | Notes
------------ | ------------- | ------------- | -------------
**name** | **String** | |
**expires_in** | Option<**i32**> | Days until expiry | [optional]
**scope** | Option<**Scope**> | 'full' grants access to all profiles (default), 'profiles' restricts to specific profiles (enum: full, profiles) | [optional][default to Full]
**profile_ids** | Option<**Vec<String>**> | Profile IDs this key can access. Required when scope is 'profiles'. | [optional]
**permission** | Option<**Permission**> | 'read-write' allows all operations (default), 'read' restricts to GET requests only (enum: read-write, read) | [optional][default to ReadWrite]
**disabled_resource_groups** | Option<**Vec<DisabledResourceGroups>**> | Resource groups to DISABLE on this key (opt-out denylist). Omit for a legacy full-access key. A key with any group disabled mints with the zrk_ prefix, gets 403 with code=insufficient_permissions and required_group on operations in disabled groups (each operation's group is published as x-resource-group), and can never manage API keys, invites, or member identity. With 'messages' disabled, the key cannot read or send direct messages through any API surface and cannot create or edit a webhook subscription broader than itself. Subscriptions that already exist are governed by their own `disabledResourceGroups`, not by this key's. OAuth connector tokens resolve against the same registry, but their groups are not settable yet. (enum: publishing, engagement, messages, contacts, analytics, ads, telephony, accounts, billing, webhooks) | [optional]
[[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)