A good place to start ...
.. is to install F-Secure's "App Permissions" app. It won't let you control the permissions, but it will show and rank your apps by permissions.
So, for example at one extreme, you can see that an app that grants total remote control of your device, like Webkey, requires permissions for just about everything (125 permissions), whereas "App Permissions", at the other extreme, requires zero permissions.
[I am in no way connected with this app]