Use of ranges in roles

I’m having an issue with the use of ranges in a role and would appreciate your help to understand the use of ranges.

Example 1:

I want to give authorization to all values starting with A, B and C and would like to express this in a range.

- what is the correct way to express this range (I’m looking for the from- and to-value) ?

Example 2:

I want to give authorization to all values starting with A, B, and C except values starting with AQ and I would like to express this in ranges.

- what is the correct way to express these ranges (I’m looking for the from- and to-values) ?