Field Level access based on role

do you want to do this for the admin or the API?

if in the admin you have RBAC.

if you are talking about the API. You have users and permissions if that is not good enough you can try. Protected Populate | Strapi Market on top of U&P