Hello @Thomas Rosenstein ,
You can grant Microsoft Graph applications access to specific site collections. Using Sites.Selected along with the Sites permissions endpoint in Microsoft Graph allows you to set the specific site collections and access level you want to grant to individual applications.
Please refer to this post for detailed information:
https://learn.microsoft.com/en-us/answers/questions/698849/index.html
Hope this helps.
If the answer is helpful, please click "Accept Answer" and kindly upvote it ,so that it will be helpful to the other community users. If you have any further questions about this answer, please click "Comment".