Cool thanks Adam,
I'll go and test a custom setup for a particular role. I'm wondering if this might fail because some roles, e.g. "Content Manager" have spaces in their names. The way that code in the web config has underscores makes me think it might not work.
I'll give it a shot anyhow and see.
Rob