Block API access for the custom sales job roles

Summary:

We created custom sales job roles (e.g. sale rep, sales mgr, sales vp) by copying the OOTB job roles. We'd like to disable REST API access for these custom job roles.

Any recommendations? -

Should we remove API related privileges from the job roles? or Do we have API security mechanism like HCM that we can use for CX Sales?

Content (please ensure you mask any confidential information):

as above

Version (include the version you are using, if applicable):

24A

Code Snippet (add any code snippets that support your topic, if applicable):