Web API limit permissions of users

[Checkpointuser2]

I would like to know if it is possible to limit API Users to a strict set of policies and object wich they only can create, modify and delete. A seperate policy layer is not enough.


This is a scenario where a clients want to automate changes so they can fastly deploy new systems ect.
It is neccacry that the scope in which they can operate is very limited so they can't change or impact the majority of rules and object.

What is best practice in such situation?
Or are there any known third party solutions that can provide in this? 

[Art_Zalenekas]

With SMS it's not possible because all objects are in one database. If you move to MDSM, each domain will have own policies, objects, etc. The answer is, move to MDSM deployment.