Mods
Azure

IAM Role: Azure/Databricks/metadata

PermissionGrant
microsoft.databricks/workspaces/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.databricks/workspaces/providers/microsoft.insights/logdefinitions/readmetadata
microsoft.databricks/workspaces/readmetadata