Returns:
true
role
runAsRole
roles
Check if a role is either a runAsRole or in a set of roles
the role to check
a pushed role (can be null)
a Group whose Principals are role names
true if role equals runAsRole or is a member of roles.