App Registration API Permissions how to limit to ONE Site Collection

I would like to have my developer work on an app to connect to information in our SharePoint Online Site Collection /sites/"x" and yet the access doesn't need to be to the WHOLE Tenant!   I tried w...