Does anyone know if it's possible to grant permissions to an Azure App to a separate site collection?

And if it's possible, can we also grant permissions to a separate subsite and a list/library?

I will be very grateful for any comments!

[![enter image description here](https://i.stack.imgur.com/ELKP0.png)](https://i.stack.imgur.com/ELKP0.png)