RBAC validation

creating accounts with various permissions granted or denied and verify that the accounts can or cannot do things as dictated by the RBAC rules