<configuration>
  <system.web>
    <authentication mode="Windows" />
    <authorization>
      <allow roles="ADsome.user" />
      <deny users="*" />
    </authorization>
...

<configuration>
   <location path="RelativePath" >
     <system.web>
      <authorization>
        <allow roles="ADsome.user" />
        <deny users="*" />
      </authorization>
     </system.web>
   </location>

<configuration>
  <system.webServer>
    <security>
      <authorization>
      <remove users="*" roles="" verbs="" />
      <add accessType="Allow" roles="ADjohannes.colmsee" />
  </authorization>
</configuration>

<configuration>
   <location path="RelativePath" >
     <system.webServer>
      <security>
        <authorization>
          <remove users="*" roles="" verbs="" />
          <add accessType="Allow" roles="ADdenis.kopic" />
        </authorization>
      </security>
     </system.webServer>
   </location>