adding test for ignore-tenant-roles