Role and Groups now read from the data bags. Not yet acted upon, but the update mechanism works.'