Role-based access control with complete sets of granular roles

A role-based access control system comprising:

• a processor;
• and
• memory comprising computer-executable instructions that, when executed by the processor, causes the processor to perform operations comprising
• marking all granular roles in a granular role group as non-tested to create a non-tested granular role set, wherein each granular role in the non-tested granular role set has not been tested for inclusion in a complete granular role set,
• randomly selecting a granular role from the non-tested granular role set,
• assigning both the non-tested granular role set and a tested-keep granular role set to the granular role group, wherein each granular role in the tested-keep granular role set has been tested and approved for inclusion in the complete granular role set,
• determining whether a user assigned to the granular role group has access to a protected function, and
• in response to determining that the user does not have access to the protected function, marking the granular role for inclusion in the tested-keep granular role set.

A computer-readable storage medium comprising computer-executable instructions that, when executed by a processor, cause the processor to perform operations comprising:

• marking all granular roles in a granular role group as non-tested to create a non-tested granular role set, wherein each granular role in the non-tested granular role set has not been tested for inclusion in a complete granular role set;
• randomly selecting a granular role from the non-tested granular role set;
• assigning both the non-tested granular role set and a tested-keep granular role set to the granular role group, wherein each granular role in the tested-keep granular role set has been tested and approved for inclusion in the complete granular role set;
• determining whether a user assigned to the granular role group has access to a protected function;
• and
• in response to determining that the user does not have access to the protected function, marking the granular role for inclusion in the tested-keep granular role set.