Configure role-specific capabilities in any level of detail