Hi KJ
The standard approach here is to set up the Organisational Model and Assign the Business Roles to Position, then assign Users to these Positions.
This will then limit the User to the Roles that they are assigned.
Transaction PPOMA_CRM is used for this purpose.
Assigning the PFCG Roles is more Authorisation based.
Take a look at SAP CRM Best Practice Guide C01 - Organisational Model for more content on this.
Regards
Arden