add test for applying roles to an instance (#19)