Privilage to make users not to update Account address using Rest API

Summary: Privilage to make users not to update Account address using Rest API

We have created a custom roles by copying OOTB Sales Representative role and removed update access, delete access, Create access for account object.

From UI, user is not able to update/delete/create any Account or address. But using Rest API the same user is able to update the Account address but not able to update Account.

We want to restrict user not to update Account Address using Rest API as well.