Restricted API access

Summary

New to Taleo administration, need to provide access to internal IT employee to update user titles but want it to be restricted access

Content

How would I give access to an internal IT resource to update user titles in the system, but do not want them to be able to see confidential data?   Is this possible?