Admin users are unable to create API key's.
Admin user with RBAC profile
RBAC profile must contain the modify right for API settings.
The Add New API Key should not be available to an Admin without the API modify right. Symantec will look to address the add button in a future version.
Add the modify right to the RBAC profile if creating API key's is a requirement.