API only access

Summary:

Hello,

We need to grant the API access to few user IDs at the same time we don't want to grant the direct application access to these user IDs. The idea is these users would never login to the application via UI but only invoke the APIs for get calls.

Based on what we have seen so far every user can also login to application, is there any option to restrict the application access but grant the API access?

Thanks

Content (required):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):