http://tomcat.apache.org/tomcat-7.0-doc/appdev/processes.html says that "manager" role is necessary to use ant deploy task, but seems that it should be actually "manager-script".
Thanks for the report. This has been fixed in 7.0.x and will be included in 7.0.7 onwards.