Mods
Azure

IAM Role: Azure/IAM/Metadata

PermissionGrant
microsoft.authorization/classicadministrators/readMetadata
microsoft.authorization/roleassignments/readMetadata
microsoft.authorization/permissions/readMetadata
microsoft.authorization/locks/readMetadata
microsoft.authorization/roledefinitions/readMetadata
microsoft.authorization/provideroperations/readMetadata
microsoft.authorization/policysetdefinitions/readMetadata
microsoft.authorization/policydefinitions/readMetadata
microsoft.authorization/policyassignments/readMetadata
microsoft.authorization/operations/readMetadata
microsoft.authorization/classicadministrators/operationstatuses/readMetadata
microsoft.authorization/denyassignments/readMetadata