1. A role-based access control system, comprising: a role definition system for defining roles to be sets of permissions on individual resources thus forming role instances, respectively; and a super role definition system for defining at least one super role by grouping a set of role instances, wherein each super role contains all permissions contained in the grouped role instances.