Roles are used to determine the permissions on the tables in the API. To give access to i.e. the product table, add the role "product", and if you only want to grant read access to the product table add the role "product_read". Admin role gives access to all tables.
You'll find this secret in the file .jwt-secret in the application folder of the service.