RBAC: Grant & Revoke tests for roles