W2K12 R2 Role Based Admin -> How?

Hello,

1) With the release of W2K12 R2 and Win8.1 RSAT, what is the MS recommended method for implementing a RBA (Role Based Administration) model for 3rd level server support staff?

2) How can you limit the RSAT features depending on security group membership?

3) Ditto for Powershell cmdlets within this new RSAT per support team or level (e.g. Lev1, 2 & 3)?

4) Within a W2K12/Win8 environment, how can you reduce the number of local administrators (i.e. improve security), when both WinRM and CIM/WMI require local admin rights on the source and target computers for a successful bind connection?

** Reference URL's would be greatly appreciated  :-)

Cheers,

Comso