With the current self service products it is only possible to assign one (or a set of) AD groups. So, if there are different roles within an application, there has to be a seperate product for each role.

Many of our applications have different roles. We would like to have one form where you can choose the required role, and subsequently the correct AD group gets granted bases on this role.