Will VAP handle Role Based Access Control to data in my web app?

Yes, if you set up logic in your web apps and in VAP. We will pass role-based access control to the website.