Privilege/Role to view and update only work email through REST API

Hi,

We need to know the Privilege/Role that we can use to update person work email address only through REST API.

We tried creating a custom view data role over 'Human Capital Management Integration Specialist' job role, but this role gives access to view and update other worker information like phone, manager etc as well.

We would like to know how we can restrict the REST API to only view and update work email address.