There is no specific quickstart for that. But this one [1] uses EL expressions which can be also applied when checking permissions for paths/web resources.

[1] https://github.com/jboss-developer/jboss-picketlink-quickstarts/tree/master/picketlink-authentication-idm-multi-tenancy