IAM Role: Azure/Firewall/metadata
| Permission | Grant |
|---|---|
| microsoft.network/azurefirewalls/providers/microsoft.insights/metricdefinitions/read | metadata |
| microsoft.network/azurefirewalls/providers/microsoft.insights/logdefinitions/read | metadata |
| microsoft.network/azurefirewalls/read | metadata |
| microsoft.resources/deployments/operations/read | metadata |
| microsoft.resources/deployments/read | metadata |
| microsoft.resources/subscriptions/resourcegroups/read | metadata |