How to know what roles allow for which services?

[Patrick]

I need to invoke the service [safeAddProductToCategory], but how do I
know which role to add?  Is there a list somewhere? Thanks Patrick