Adds functional tests for roles. For now, the tests are created under
a single class. Once we have a gate that runs against LDAP, we will
create a class that only contains readonly tests and a tox call for
it (e.g tox -e functional-readonly).
Change-Id: I62b022044b56b6219a83e9e5cc0136c95389db16