AppUi Role based Security , Log Level and Deployment

Summary:

We are moving one of our VBCS app to AppUi extension and following are some clarifications.

Content (required):

Role Based Security - In a normal VBCS app we define our own roles and map it to IDCS groups. In AppUi we see that the application's user variable seems to have all the SaaS Role Codes that the user has.

Question is how do we use these to restrict an entire flow/page like we can in VBCS.

Set Log Level - In order to debug during the development we generally rely on the console to see the activities but looks like in case of AppUi it only logs Errors, can we override it like we could in VBCS logConfig