Mods
Azure

IAM Role: Azure/Search Management/metadata

PermissionGrant
microsoft.search/operations/readmetadata
microsoft.search/searchservices/readmetadata
microsoft.search/searchservices/listquerykeys/readmetadata
microsoft.search/searchservices/diagnosticsettings/readmetadata
microsoft.search/searchservices/metricdefinitions/readmetadata
microsoft.search/searchservices/logdefinitions/readmetadata
microsoft.search/searchservices/privateendpointconnectionproxies/readmetadata
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata