Check if a role is either a runAsRole or in a set of roles
Parameters: roleName - the role to check Parameters: runAsRole - a pushed role (can be null) Parameters: roles - a Group whose Principals are role names true if role equals runAsRole or is a member of roles.