Limit an API token for only one task

How can i create an api token that with rancher cli only allow to me restart an specific deployment. I’m in a team as a DevOps Engineer, and for the deploy stage i need restart a Deployment onto my Rancher Cluster with the rancher CLI tool, but i dont found how create a token that allow me to do that only, not allow use that token for any other task.