Yes, this is a must have requirement, the lack of being able to have control over which roles have access to the different parts of the application leads to confused users, bad usability for them and maintenance problems. Thanks for adding this to OAS DV.