Cube permission question

Hi,
I need to restrict dimension attribute data for specific user groups with SSAS 2012 - multi-dimensional.
I believe I can do this by putting users in a specific AD group - and then adding to an SSAS role with said attributes removed along with