Any references to add OAuth security (apart from user credentials) while calling BO REST API?

Summary:

Added REST API security (OAuth) for business object in VBCS

Content (required):

We need to add OAuth security while calling Business Object REST API that has added client credentials/token apart from user name/password? This is to enforce security for business (sensitive) data stored in the business object. I have a youtube link: https://www.youtube.com/watch?v=NIRhmHaycME and would like to know if you can share a blog/document that explains the setup more and what can be achieved in enforcing security. The API will be called by OIC/PCS process only and should be out of reach by business users who have service user access to the pod.