Is it best practice to use a custom role with all the appropriate permissions and assign it to the custom GL plugin record?

I'm not sure what the best practice is, but we do exactly that. We created a custom GL role with limited permissions just for our GL plugins.

Thank you!