collection specific permissions for dynamic key

Is it possible to give a dynamic key permission to delete a specific collection or database instead of all of them? There is one database that we want to put extra protections on to prevent accidental deletion. Our cloud function has permission to delete documents. Is there a way to specify that a particular collection cannot be deleted using the dynamic key of the cloud function? Is there a way to specify this using regular keys? I understand that the permissions in the collection settings are not used if using a key, is this correct? Thank you

I don't believe there is a way to limit api keys to just specific collections. They operate as an admin of sorts, you grant them access to everything. Collection.Read, grants them access to read everything within all collections. You can setup your own authorization within the function, preventing it from accessing certain collections.