How to create a role with limited access (by module) to Reports and Analytics

Summary: When you give a user access to the BI catalogue as a 'BI Consumer' then the person has access to data from all modules in play. We want to limit certain users to certain modules, like:

An AR user should only have access to the AR related folders in BI.

Or;

An AP user should only have access to the AP related folders in BI.

Content (required):

We know that we can restrict individual users from having access to selected folder

s, but this is extremely cumbersome.

We would prefer, if there was an option, that allowed for groupwise restrictions, for example by using a general role, which we could call 'BI Consumer AR', 'BI Consumer AP' ... , that could be assigned to groups of users. But beyond individual users it only seems to be possible to use the three predefined BI-roles for access restriction in the BI catalogue