I always like to create a separate login. temporary if possible (set a note in Outlook to delete it) with a strong password.
I'd consider that it might need to be permanent as the app might bury it somewhere, so be sure that you conform to standards you have for naming, roles, etc. If it has to remain perm, I'd likely remove some permisions or roles from the login after install.