Mods

IAM Role: Azure/Alerts Management/metadata

PermissionGrant
microsoft.alertsmanagement/smartdetectoralertrules/readmetadata
microsoft.alertsmanagement/operations/readmetadata
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata