1. A method comprising: maintaining a plurality of group definitions defining a plurality of groups, wherein the group definitions individually include one or more logic clauses, wherein the one or more logic clauses, when evaluated, indicate whether an entity is a member of one or more of the groups, and wherein the groups are either entitled to access the computer resource or not entitled to access the computer resource; analyzing one or more of the group definitions to determine whether one or more logic clauses are one or more of under-used, over-used, or inaccurate logic clauses to determine inefficiently used logic clauses of the one or more logic clauses; and in response to determining that one or more logic clauses are under-used, over-used, or inaccurate logic clauses, re-factoring the one or more group definitions by eliminating the inefficiently used logic clauses.