Clear it in 3 steps
Start the environment
Investigate the target
Submit the flag

In runtime-generated JSON data.txt, find the only user whose role is admin, active is true, and email contains @secret.com, then retrieve its flag field.
Load the users array with json
Test role, active, and email together
Print flag from the matching record