A. Granting specific privileges to roles directly within the application's stored procedures and functions, checking the current role using and conditionally executing code based on the role.

B. Using the 'allowed_roleS section in the manifest file to restrict access to certain functionalities based on the consumer's roles. This ensures that only authorized roles can interact with those components.

C. Creating separate versions of the application for each role, with each version containing only the functionalities that the role is allowed to access.

D. Defining application roles within the provider account and mapping them to consumer roles during the installation process. These application roles can then be used for fine-grained access control.

E. Defining roles within the setup script with specific privileges and instructing the consumer to grant their existing roles to these newly created roles.