Privilege for specific actions - API

Summary:

One of the client requirements is to restrict users only for API calls and that too users should have access to a specific set of APIs.

Like - File Upload to a specific account (Gl related) and ESS job - General Ledger Schedule Process.

Can we restrict or create a custom role with specific privilege for the same? Where can i see the list of priviledge required.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):