Replacing Data Level Security on Finance Programs

We are going from LAUA to Lawson 9 security.  Our financial modules used the Data Security.  Since data security is tied to the SC field on the screens, LAUA leveraged that.  Is there something similar in Lawson 9 security?  Do I have to look at each transaction we use to see if it is using company/process level security?  Our consultant suggested we use the CompanyControl and AccountingUnitControl attributes, but we would have to maintain that.  We thought about putting roles like our security class by location and assigning the users to those roles.  We thought about using the employee information for the majority of the access and have those who need access to all in another role.  I am wondering what approaches others used.