Mods
Azure

IAM Role: Azure/Security Center/metadata

PermissionGrant
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata
microsoft.resources/subscriptions/resources/readmetadata
microsoft.security/advancedthreatprotectionsettings/readmetadata
microsoft.security/alerts/readmetadata
microsoft.security/applicationwhitelistings/readmetadata
microsoft.security/complianceresults/readmetadata
microsoft.security/locations/alerts/readmetadata
microsoft.security/locations/jitnetworkaccesspolicies/readmetadata
microsoft.security/locations/readmetadata
microsoft.security/locations/tasks/readmetadata
microsoft.security/policies/readmetadata
microsoft.security/pricings/readmetadata
microsoft.security/securitycontacts/readmetadata
microsoft.security/securitysolutions/readmetadata
microsoft.security/securitysolutionsreferencedata/readmetadata
microsoft.security/securitystatuses/readmetadata
microsoft.security/securitystatusessummaries/readmetadata
microsoft.security/tasks/readmetadata
microsoft.security/webapplicationfirewalls/readmetadata
microsoft.security/workspacesettings/readmetadata
microsoft.resources/deployments/operations/readmetadata
microsoft.resources/deployments/readmetadata
microsoft.resources/subscriptions/resourcegroups/readmetadata