The GraphQL plugin is built on top of Nexus which allows for a lot of customizability. For example, this code snippet shows how to add a field level permission to the default email attribute on the UsersPermissionsUser.
Here is the Strapi docs reference—although I ran this code inside the src/index.js file as it didn’t work within the config/functions/register.js file.
