Least privilege role for Istio setup

Hi,

Is there a list of permission a service accout/user/role need in order to install and configure istio using istioctl?
Or is there a least privilege role defined somewhere for this?

Thanks and have a great day,
Sebi