I think that you might be able to use URSP to accomplish this but almost all of the customizations that would need to be made would require Security Assist. This is more or less a user level authentication setup. Some users will have one level of access and others will have different level of access. We have a Solution Recipe that deals with this very topic. I think that reviewing this solution recipe will help you to understand the parts that are in play and what is done to accomplish this. Here is a link to the Security Assist support page:
securityassist/
This is located in the Solution Recipes under User Level Authentication. Once you have a better understanding of how to accomplish this with the use of Security Assist you will then be able to modify the URSP or create your own setup with the Security Assist wizard.