OpenAI added controls for creating API keys on September 15, according to its API changelog. Administrators can restrict new keys to service accounts or to individual project users, or prevent new keys from being created altogether.
Organization rules override project settings. The announcement says existing keys are unaffected, an important distinction for teams checking whether a policy change will interrupt a running application.
The update follows September 10 support for expiration dates on new project keys and administrator limits on their lifetime. For teams maintaining website integrations, the practical task is to check both creation permissions and renewal arrangements. These are documented platform changes, not a test of a particular account configuration.