The api_users, groups, and roles data bags can now be used to delete resources.

Simply set the attribute 'delete' to true. The operation is idempotent.