A computer-readable storage medium storing instructions executable by a processor for resolving permissions using role activation operators to evaluate permissions assigned to a user in a role context inheritance hierarchy. The stored instructions comprise several steps: a step of retrieving a plurality of activated roles within a role context that match roles assigned to a user, wherein one or more permissions in the role context inherit from one or more permissions in a parent role context in a role context permission inheritance hierarchy; a step of determining an aggregate permission for each of the plurality of activated roles, wherein a role activation operator determines how an activated role is evaluated; a step of processing the aggregate permissions for the plurality of activated roles; and a step of resolving a final permission for the user.