This endpoint allows a partner to fetch the API keys (ID, label, creation date and key prefix, never the secret) of one of its accounts from the Partner Portal. A portal user who was removed from the partner or deactivated is refused with INVALID_ACCESS even with a still-valid token. Partner Portal session only: the request must carry the Partner Portal bearer token of a user with the Admin role, and the partner must have AccountCredentialsAccess. The account must be an Active account or sub-account of the partner (or, when PartnerCreationEnabled is on, of one of its child partners). Returns RESOURCE_NOT_FOUND when it is not.