Control user access with the right level of granularity, where you can give access to a certain cluster, to individual topics or consumer groups based on roles. You do this by assigning users to roles. Group roles and Assigning privileges to roles as needed. Provide authorization through a UI where you can centrally manage and enforce security authorizations across components. 

Requested by the SA for UPS: Ex : Within the UI, how do we have user/permission segregation to do specific type of tasks/navigation