Openzeppelin v3.0.0 (currently in Beta) introduces AccessControl.sol.

Have you checked this out yet? Looks like it has the functionality to solve this problem.

Great article :) thanks Alberto