Permissions required for the API key are asset.read and albumAsset.create
asset.read
albumAsset.create