> You can't create an SSH key with select role permissions like you can with a Personal Access Token. The ssh-keygen manpage has a section under the heading CE

> You can't create an SSH key with select role permissions like you can with a Personal Access Token. The ssh-keygen manpage has a section under the heading CERTIFICATES that describes the permissions that are configurable when generating the certificate (though those permissions are ssh specific as opposed to the permissions for API access).