vRO API user - how to prevent from logging in to vCenter?

Hi,


The vRO api account must have all needed authorizations in the DC and/or cluster to perform the actions triggered by the workflows. However, I do not want this user to be used to log in to the Vcenter client or web client to perform manually these actions. How can I prevent this? Found nothing in the roles authorizations details.


Thanks.