Restriction for API Key

Hello,

I would like to ask, how do I restrict the privileges roles for API Key, to pin point to specific "service.name" field in APM data?

Thank you.