You can assign user role permissions for various business objects per module.
For example, for the WAS module you'll see permissions groupings for WAS business objects.
WAS Asset Permissions
Scanner Appliance Permissions
WAS Scan Permissions
WAS Schedule Permissions
etc.
What are the permissions for each role?