Mods
Azure

IAM Role: Azure/Application Gateway/admin

PermissionGrant
microsoft.network/applicationgateways/writeadmin
microsoft.network/applicationgateways/deleteadmin
microsoft.network/applicationgateways/setsecuritycenterconfiguration/actionadmin
microsoft.network/applicationgateways/backendaddresspools/join/actionadmin
microsoft.network/applicationgateways/start/actionoperator
microsoft.network/applicationgateways/stop/actionoperator
microsoft.resources/deployments/cancel/actionoperator
microsoft.resources/deployments/deleteoperator
microsoft.resources/deployments/validate/actionoperator
microsoft.resources/deployments/writeoperator
microsoft.network/applicationgateways/backendhealth/actionreadonly
microsoft.network/applicationgateways/providers/microsoft.insights/logdefinitions/readreadonly
microsoft.network/applicationgateways/readmetadata
microsoft.network/applicationgateways/getbackendhealthondemand/actionmetadata
microsoft.network/applicationgateways/effectivenetworksecuritygroups/actionmetadata
microsoft.network/applicationgateways/effectiveroutetable/actionmetadata
microsoft.network/applicationgateways/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata