More complete testing of roles implied by private program role
assignments.
Auditors can create, read, and update requests.
Auditor permissions on read of responses are validated.