This function takes the following parameters:
Entry defining the role
Set by the callback to the Distinguished Name of the entry at the base of the scope
Set by the callback to a value such as LDAP_SCOPE_BASE, LDAP_SCOPE_ONELEVEL, or LDAP_SCOPE_SUBTREE