Restricting REST API Operations

Content

Hi Team,

Is there a possibility of restricting the operations which can be performed using a REST API? For example, Worker REST API offers create, update and get operations. And I want to restrict the user from using the update and get operations. The user should be able to only create the Worker.

I understand, I can make use of duty roles to restrict the user to only view the records. But my requirement is to allow the user to use Create only. 

Is it achievable? If yes, can you please guide how it can be done?

Thanks.

Version