I have small trick for very specific users to track what they need to do.
If you use classic, open Tools->Client Monitor. Press the Start button on form and after that, you need to do all activities they users need to do.
Open all tables you need, create all records you need, open all reports you need, post all journal/documents you need... After that, press Stop button.
Copy all entries from Client Monitor form to Excel and make pivot. Put No. to rows and Parameter and Function Name to columns and any data to values. You will get all tables you need desired role. For table you have INSERT, you need to set Insert/Modify and for others Read. Try something like that.
I know beside that, there are some tools (no-free) if you think this is hard to set at this way.