URE does not offer such way. Every subsite has own list of pages and/or categories. You can restrict access to them on per site – per page/category basis only.

Right, ‘Update Network’ overwrites all roles at subsites with exact copy from the main site. It’s intended for the case when you have identical roles at all subsites. If you plan to have different roles between subsites you should not use ‘Update Network’.