Giving access permission depend on user role is the customization of code.
1. whenever login user clicks on menu control you need check permission according to user in database then either open
the page or redirect user to Error page with message "You do not have access".
OR
1. Filter menus accordingly to user role
OR
1. user SiteMapProvider with menu control.
rolebased access permission for menu control with sitemap[
^]