We used to manage our own RBAC for this package, but over time we have looked at other options. Currently, our favorite package that has worked out is LaraTrust. We have even done some pull requests to their code to add better customization options.
For our permission handling we use LaraTrust. We have not made ny modifications to the basic set up other than the following bits.
rbac_so that they are all grouped in the database.
Other than this, we completely follow LaraTrust. Look to their docs for anything you need to do.