API Key Permissions for Behavioral Analytics

I configured Behavioral Analytics using an API key to track analytics from Search UI and I am trying to refine the permissions so the API key only has access to what it needs. I am running an on-premise Elasticsearch installation. Can anybody help me determine what resources this API key needs permissions to? Thanks!

I ended up figuring out the solution after some more testing. The API key requires post_behavioral_analytics_event permissions at the cluster level.