It takes a little manual configuring, but yes, you can manipulate access and capabilities throughout all your Network sites from one place. You have to establish one site as the default from which settings propagate, and then you can send everything from that site’s access configuration to all other sites, or you can pick and choose.
Take a look at the Multisite Support section of the ConfigPress PDF in /advanced-access-manager/docs/