Is there a working example to enable role based access for Smart Client Plugins?

No, we don’t have such a sample. However, it is the same as configuration on Sensor Monitor sample. Please see following,

This is Management Client Security Role settings – Go to MIP tab and you can see Sensor Monitor security settings.

This permission is in SensorMonitorControllerItemManager.cs line 384.