Hi Kamal,
You have to take help of portal developer for the same as for PI you have to write this in deployement descriptor for application to make this work.
In deployement descriptor you define the permission or role name and once this is done you can include that in roles to be assigned to user to make the logic work.
Please raise this query into NW portal group to get it solved.
BR,
Mangesh