Are there pre-defined security roles for each v3 API registration?

We don’t have predefined roles as each external system may require different data...

As such it will be up to your school to make the determination for each system. A best practice would be to configure a role for each external system (or type of system) you wish to connect to TASS using APIs.

For example, you might want a system that uses the Student Details API to only have access to core student details but not have access to data from the medical endpoints.