Currently, asset layout cannot be retrieved with a company-scope limited API key.

Company-scoped API keys should be allowed to retrieve asset layouts to support scripting to add assets of that type to the company and similar uses. Nearly all of the information in Asset Layout is otherwise available to a Company-Scoped API key by just retrieving an asset of that type, so there seems little increased risk.