Does JBoss EAP 6 support role-based access control (RBAC) for domain management?

Issue

• We have a requirement for tiered permission access to the admin console in EAP 6, such as a read-only logon that allows access to the Admin console but with read-only access. Is this possible in EAP 6?
• We need create multiple Management user with different roles, which some users only be allowed deploy application, some users have System administrator right.
• How to restrict access to Management Console to the some particular set of groups via LDAP in JBOSS EAP 6.1?
• Best Practice Guidance for setting up JBoss EAP roles in RHEL ?
• How to configure JBoss management access via LDAP ?