Configuring Aerospike with Least Privilege: Roles, Permissions, and Network Security

How can I configure an Aerospike cluster to follow the principle of least privilege? I would like to know the steps for creating roles with minimal required permissions, assigning those roles to users or applications, and securing network access (e.g., firewall rules, TLS) so that each component only has the access it needs to operate.