Limit standard API Rest Result based on specific user

Summary:

Hi, we are in the need to call the standard Rest API (eg /crmRestApi/resources/11.13.18.05/opportunities) using a Machine to Machine user from an external system, but the data result would need to be limited on the visibility a specific Employee has on Sales Cloud.

We know that calling the API with the specific user Login would return the limited data, but we can't use the user login. Would it be possible in some ways to "Impersonate" the user to have his same data visibility?

I don't think there are parameters in the api other than the Authorization Headers that apply visibility rules.