REST API Restriction on Roles/Users

Summary

Can we restriction Users to not make REST requests?

Content

Hi

In our Sales Cloud application, we have configured certain layouts for different kind of users and based on roles we are enabling respective layouts to control to show different buttons and fields. For example, on Opportunity if a user logins with role A_role then he will see layout A-layout where he has button to Add & Delete records. If a user logins having role B_role then B-layout will be enabled where the user can only add new records and so on. The problem is that we copied our roles from Sales Manager role and we did not removed delete/create access