REST only users

We never had this kind of need and there is no such built-in functionality. You can prevent web logins adding your code to BeforeLogin event.
Here is the function that can help:

https://xlinesoft.com/phprunner/docs/rest-api-inrestapi.htm

Thanks Sergey, missed that in the manual, sorry.