Restricting access based on roles

[Andrew Banks]

I have some directory's in my web site which I only want to give users with
a role of "management" access to. I have assigned the roles allready.

Is it possible to control this using my web.config file?

My current web.config file contains the code below, which makes sure users
need to be logged in to access any files at all. I just want to add the
extra restrictions to this so only the "management" role can access
"directory1", "directory2" and "directory3"

<authentication mode="Forms">
<forms loginUrl = "Login.aspx" />
</authentication>
<authorization>
<deny users="?" />
</authorization>

Thanks in advance