[Zope] possible ways to define roles permissions?

Hi all,need your advise. my application requires a few custom roles, one of which tends to have all the default Zope permissions, except for View managemen Screens. Is there any way to do it, other than creating a long list as a parameter passed to manage_role api call? thanks for your help