This feature would be really useful. Your implementation ideea looks solid to me. To clarify: this would not allow individual blogs to have different capabilities for the same role, right? (This would be a good thing, in my case) -- http://scribu.net