Mods

IAM Role: Azure/Alerts Management/operator

PermissionGrant
microsoft.resources/tags/writeoperator
microsoft.alertsmanagement/smartdetectoralertrules/readmetadata
microsoft.alertsmanagement/operations/readmetadata
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata