There should be quickstarts (or an expanded dataroles quickstart) covering row based security, column masking, and possibly the use of a udf that uses the subject, a credential mapping security domain, or credential pass-through to highlight other common scenarios.