Add service role to service users:

Previously, service users were given only the admin
role, causing horizon to fail to create new tenants.