Hmmm...does this mean that one failing roles fails the whole test? If so, I think there's a happy medium between writing out all the roles as before and failing the entire test one one role. Using `pytest_generate_tests` to parameterize the tests (I think infra power control tests do this) could be used to pass in ldap_group and menu_contents, generating a new test for each run through the loop.