If by roles restrictions you mean "smb/role/edit/id/XXX", yes, I tried that, but then you also activate Add New Domain Alias,Register Domain Names, Manage Domain Names and Remove Domain Names.
If you mean something else, no, I don't know where to find that?