Allow/disallow logins based on Role

Follett Internal Implementation - Customer Request
Customer would like to prevent students from being able to log in. Can a checkbox be placed in the Role permissions to enable/disable logins? Might be recommended to check the box as a default.