Construct a role search filter to control what log data users with that role can access.