tempest: need to tag role and include separately