Restricting access to sub-resources in an API proxy

[#1]

Say that I have the following API proxy: example.apigee.com/listen/

This proxy then has the following resources:

example.apigee.com/listen/metrics/

example.apigee.com/listen/1234/content/

example.apigee.com/listen/dashboard/

Is there a way to grant access to only some of these resources based on the API Product or Developer App? E.g. Granting access to /metrics, but restricting access to /dashboard