SCOM APM RBAC?

Hey All, 

I'm setting up a new distributed SCOM 2012 R2 environment and implementing quite a bit of role-based access control. To that end, I'm not seeing a lot of documentation that has to do with APM RBAC. I've got users who can only have access to data from certain environments, including APM (App Advisor/AppDiagnostics Consoles included). How can I accomplish this? 

Thanks!