Implementation
The core framework itself defines only an SPI for this service; there is no default implementation. Rather, the implementation will depend on the security mechanism being used.
SecMan
If you have configured your app to use the SecMan extension then note that it does provide an implementation (UserRegistrationServiceForSecman) of this UserRegistrationService.
This can be configured to set up initial roles; see secman docs for details.