Kubernetes runner priviliges

Hello,

i want deploy a kubernetes runner on my k8s cluster but i don’t want create a clusterrole for my service account to execute and deploy a new pod for each new job, is a role is enought ? or the clusterrole is mandatory ?

Thanks in advance.