This is an API creation, using an admin account user+key. SSO is not enabled.
Is the max account check supposed to be bypassed on admin/staff account or via an API key, or is that only true when SSO is enabled?
(little aside: I can’t ever generate a key for the system account. clicking on it in browser, impersonating, admin profile, etc -> always adds error log message can’t verify csrf token authenticity)