Можно сделать права доступа AccessControl для разных ролей в конфиге на все контролеры?

'as access' => [
        'class' => 'yii\filters\AccessControl',
        'except' => ['site/login', 'site/error'],
        'rules' => [
            [
                'allow' => true,
                'roles' => ['admin'],
            ],
        ],
    ],

'as access' => [
        'class' => 'yii\filters\AccessControl',
        'rules' => [
            [
                 'actions' => ['site/login', 'site/error'],
                'allow' => true,
                'roles' => ['admin'],
            ],
                        [
                 'actions' => ['user/index', 'user/view'],
                'allow' => true,
                'roles' => ['moderator'],
            ],
        ],
    ],