I have a merchant who installed our app which enabled all permissions. But now she is coming back to ask not to enable permissions for select access. Is this possible? How do we fulfill this request?
You should only request the permissions that are necessary for your app to function. Giving all permissions is a security risk for the store.
You set the scope within your app: https://shopify.dev/api/admin/access-scopes