Finer grained control of access to plugin options?

We found https://s2member.com/kb-article/how-do-i-control-access-to-the-s2member-plugin-options/ which explains how block access to all of the options. We nee to set up finer grained control. There are some things in the option panel that we need to allow less technical staff to access while not leaving other options vulnerable to the well meaning, but less skilled. Ideally we would like to separate access with 2 or more capabilities or roles - like maybe s2admin and s2member-management

Like:
import/export of members
resend registration access links for failed registrations

but not:
API settings, general options …

Has anyone done this? Is there a hook you would suggest?