ShaneAU Exactly, yes that is a point of interest to me as well. (unclear, if non-administrators will have API keys as well).
@Compuit and @ShaneAU why do you not just try and find out and report here if yes or not. If not then you could post a separate topic with a request to enable API for all users assuming that permissions “transfer”.
I think the problem with API for other users would be the permissions as usually you would then have to string each permission into the API key.
I have not come across any API implementation with varied user permission based on the api_username alone nor experimented with extending such API key with more variables than username.