added cloneRole method
added clone role and descriptions; for role assignments, don't show revoke for inherited assignments (instead say where role was assigned)