Mods
Azure

IAM Role: Azure/Monitor/Metadata

PermissionGrant
microsoft.insights/activitylogalerts/readMetadata
microsoft.insights/actiongroups/readMetadata
microsoft.insights/logprofiles/readMetadata