| microsoft.alertsmanagement/smartdetectoralertrules/write | admin |
| microsoft.alertsmanagement/smartdetectoralertrules/delete | admin |
| microsoft.resources/deployments/cancel/action | admin |
| microsoft.resources/deployments/delete | admin |
| microsoft.resources/deployments/validate/action | admin |
| microsoft.resources/deployments/write | admin |
| microsoft.resources/tags/write | operator |
| microsoft.alertsmanagement/smartdetectoralertrules/read | metadata |
| microsoft.alertsmanagement/operations/read | metadata |
| microsoft.resources/deployments/operations/read | metadata |
| microsoft.resources/deployments/read | metadata |
| microsoft.resources/subscriptions/resourcegroups/read | metadata |