If different things need to be able to access the same API, how do I control what they can do?

6 / 26