Authorization rules testing and AD roles

[Chicagoan2016]

We have an application that uses AD Security, everything is implemented with Csla based Identity and Principal along with classes from

     System.DirectoryServices.AccountManagement;
     System.Security.Principal;

I can use Csla.ApplicationContext.User.Identity..... perfectly fine but what do you folks do when you want to test users with different roles (other than making changes in AD)?

Kind Regards