[keycloak-user] public rest services

I have some services that should be public, I am allowing anonymous users in my page. They should be able to access some minor features of my site. Should I create another security-constrain for public users, is there a way to create a public role and get a token for that. Or that is more like creating a role for an app, maybe I understood that part wrong. Thanks. Juan Diego