Risk assessment roles are implemented. Behave tests are provided that

demonstrate the proper service behavior for the roles and permissions.