Domanda di colloquio di Walmart

How would one authenticate REST api calls so as not to expose the API for usage to everyone in the organization