Log in as a user, assume an administrative role, and test the role for effectiveness.
Using the this_host: Scope=Files, Policy=TSOL toolbox, follow the procedures in "How to Verify that Users and Roles Work" to ensure that every role is working.