Roles which give access to setup a particular module

We are looking for roles that gives setup access to particular modules. For eg, when we assign Application implementation Consultant or IT Security manager, the application by default provides access to setup all modules like AP, AR GL etc.

Could you please let us know if we have separate roles for each module that we can leverage? Like, if someone wants setup access to only AP module, they should have setup access only to AP module. User should not have access to any other module.