This local roles manager checks for both user and the user's groups local roles as well allowing for local roles blocking on containers.