One would like to concentrate all necessary applications of one particular task in the company in one »role« in order to clearly arrange authorizations. Role mining defines the process of how to extract these »roles« from existing authorization data. OFFIS develops a role mining tool getRole, that executes a role mining first and provides the extracted roles in a graphical form to the user afterwards. The user can influence the result of the role mining directly through filter mechanisms or by erasing unwanted roles. Therefore, getRole can be applied to a step by step development of a complete role concept. At the same time, one can execute a complete verification of the existing authorization structure with this tool.