AAM comes with a one-of-a-kind access settings inheritance mechanism. That what differentiates on the market and that what allows you to define access settings to your content your way.
There are 3 different levels of default settings. In this post, you'll learn how to set default access to all pages for any particular role. The same approach can be taken to set default access to all posts or custom post types.
Let's say you need to restrict access to read all the pages for the Subscriber role. The short video below demonstrates how to do that.
From here you can drill-down to Pages and override this access for any individual page or even page category (if "Page Category" option is enabled).