As other system will transfer data to D365 FnO via API, please advise whether and how to restrict this API to access particular data entity
as my understanding
1) To do app registeration in Azure portal for getting client id and secret value
2) To make authenication call with client id and secret value to acquire token
3) to make API with this token to access D365 for doing CRUD.
In view that this API can do any actions in D365, is it possible to restrict it to access particular data entity instead of all data entities? Additionally, can it restrict to do particular action, for example, get data.
Thank in advance