Mods
Azure

IAM Role: Azure/Monitor/Admin

PermissionGrant
microsoft.insights/activitylogalerts/writeAdmin
microsoft.insights/activitylogalerts/deleteAdmin
microsoft.insights/actiongroups/writeAdmin
microsoft.insights/actiongroups/deleteAdmin
microsoft.insights/logprofiles/writeAdmin
microsoft.insights/logprofiles/deleteAdmin
microsoft.insights/activitylogalerts/activated/actionOperator
microsoft.insights/activitylogalerts/readMetadata
microsoft.insights/actiongroups/readMetadata
microsoft.insights/logprofiles/readMetadata