Only add roles for enabled services

If a the tempest account generator script takes a role from a service
that's disabled in configuration then we shouldn't expect the roles
to exist. This commit addresses this by checking the if the service is
enabled before attempting to add the roles.

Change-Id: Ic797fbc05d58e7f5af323ad7741546ced97754d2
1 file changed