The Salesforce org I am working on needs to restrict access to the Salesforce's REST Resources from Lightning Platform REST API. (for example /services/data/vXX.0)

From my research I understood that you need "API enabled" permission in order to access these services, so if I want to restrict them I would just have to deactivate this checkbox from the profiles.

The problem is that I still need access to all the custom Rest API, which can be invoked only if the users have the same permission. "API enabled" is supposed to allow API calls to any Salesforce API, whether custom or standard.

Can you please help me with that? I was not able to find a clear answer so far.

The Salesforce org I am working on needs to restrict access to the Salesforce's REST Resources from Lightning Platform REST API. (for example /services/data/vXX.0)

From my research I understood that you need API enabled permission in order to access these services, so if I want to restrict them I would just have to deactivate this checkbox from the profiles.

The problem is that I still need access to all the custom Rest APIs, which can be invoked only if the users have the same permission. API enabled is supposed to allow API calls to any Salesforce API, whether custom or standard.

Can you please help me with that? I was not able to find a clear answer so far.