can Access Models capture both user roles AND data access?

just to confirm, ORMC CANNOT capture both user roles AND their associated users' access to separate data sets?

If that is so, isn't that a bit of a gap?

Ideally, separate Business Units need to know [via Models/Controls] when users from a differing BU have perhaps, cross/shared BU roles but have the wrong data access assigned.

..or am I missing something?

TIA