If this is data comming from the API you can use the controller to return the data that only that role has access to by filtering.
If this is for the Admin part of Strapi I think you do need to have a license like Bronze so you get RBAC or Granular Access control in the admin panel for the groups or roles you want.