Adds functional tests for groups. For now, the tests are created under
a single class. Once we have a gate that runs against LDAP,
we will create a class that only contains readonly tests and
a tox call for it (e.g tox -e functional-readonly).
Change-Id: Ib1db14367b8dc3bd6356aff0dfef1fc573211c6e