function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
Marketing Marketing 27Marketing Marketing 27 

How do I limit the permissions of a connected app?

I have made a connected app to allow an external vendor access to use one of our Rest Webservices.

I have set the OAuth Scope to Full Access. I only want the vendor to be able to use one Apex Rest Webservice method and he should only have access to edit one custom object. I can't find anywhere in Connected app settings where I can narrow this down like on a permision set or profile. 

How can I accomplish this? Do I need to use Custom Permissions and/or custom attributes?

Thanks.
VinayVinay (Salesforce Developers) 
Does below reference help?

https://help.salesforce.com/s/articleView?id=sf.security_api_access_control_all_users.htm&type=5

Thanks,