LBAC to restrict UCM Access

Summary:

There is requirement in our project to restrict access to fusion related UCM based on IPs, it should allow users to access UCM based on LBAC.
Oracle Documentation says:
If users sign in to the application from an unregistered computer, they can view and access only the generic tasks that aren't tied to any particular role. From an unregistered computer, they can't access the role-based tasks, which they could access from office.

Is Fusion UCM access is a generic or role based? Can we restrict UCM and its file access using LBAC?
Example: If user has access to hcm/dataloader/import files, can we restrict access to these files from unregistered IPs not in LBAC configuration?