But you do have some other easy options:
- You can assign roles to people directly in the block or course, or
- If it's a custom block, you can create a new capability just for that block (in blocks/myblock/db/access.php), and set that capability to ALLOW for your staff role. The block code needs to obviously check for the capability before displaying anything.