Sitecore security - combining roles -

is there way combine access rights sitecore item?

for example, have page lock down users member of 2 different roles rather just one, , user has 1 of roles should denied access.

i know can have roles within roles wondering if there simpler way achieve this?

i'm using sitecore 7.2.

if trying check in code, can using

var user = authenticationmanager.getactiveuser(); return user.isinrole("role1") && user.isinrole("role2") ? "granted":"denied"; 

but if trying achieve in sitecore security on item, , of 2 roles assigned. ex: if allow access item in role1 deny in role2, user roles 1 , 2 have his/her access denied.