Added tests for scenario without service-admin roles and for tenanted
Updated delegable tests.  There still needs to be a discussion whether unauthed users in delegable mode should return 401 or 200