Automatically Removing Non-Inherited Active Directory Group Memberships in a Dynamic Role-Based Access Model

I have defined two business roles, and each has been assigned an Active Directory group as a resource that users should inherit by belonging to one role or the other. Membership to both roles is dynamic. How can I enforce that all group membership assignments that are not inherited through role membership are automatically removed?