How can i control api access but they have orchestrator access

I would like to control orchestrator api access for user but still they can access uipath orchestrator but they can use same features with api calls