Is there a way to only allow a user to access via integration a specific/custom offerings in BICC

Summary:

Hi,

We are creating a custom Offerings within BICC to only select specific Data Stores within Core HR (Assignments, Work Relationships, Names, Address etc…)

Once we have created this Custom Offering, we are planning to create a new technical user that could trigger BICC via REST API and also limit this user that it is only able to trigger this Custom Offering and not any other offerings. We wanted to prevent that the user can potentially access data he is not supposed to.

Or access to specific data objects is based on data stores and not on the offering level?