Currently the menu entries in the Control Panel are automatically shown or not based on dynamic rules implemented by ControlPanelEntry implementations. While that's useful for many cases there are situations when manually specifying which roles provide access to which tools is necessary.

This is specially true for the case of the tools used to manage Content. Currently they are only shown to users with either of the following roles: Community/Organization Administrator or Community/Organization Owner. But if you create a custom role such as Blogs Administrator, the users that have it won't be able to manage the blogs through the control panel.

The solution is to create a new permission called MANAGE_IN_CONTROL_PANEL for control panel applications that can be assigned to any role to give access to its users to that application in the control panel. This permission can be limited in scope to specific organization or communities if desired.