Datadog's key guide distinguishes organization API keys from user-linked application keys. Omitting application-key scopes can leave the key with its creator's permissions.
For Datadog developer integrations, choose explicit scope and ownership. Include account deactivation in the maintenance plan; a working integration should not unexpectedly depend on one person's continued employment.