Mods
Azure

IAM Role: Azure/Storage/Metadata

PermissionGrant
microsoft.resources/deployments/operations/readMetadata
microsoft.resources/deployments/readMetadata
microsoft.resources/providers/readMetadata
microsoft.resources/subscriptions/resourceGroups/readMetadata
microsoft.storage/operations/readMetadata
microsoft.storage/skus/readMetadata
microsoft.storage/storageaccounts/blobservices/containers/immutabilitypolicies/readMetadata
microsoft.storage/storageaccounts/blobservices/containers/readMetadata
microsoft.storage/storageaccounts/blobservices/providers/microsoft.insights/diagnosticsettings/readMetadata
microsoft.storage/storageaccounts/blobservices/providers/microsoft.insights/metricdefinitions/readMetadata
microsoft.storage/storageaccounts/blobservices/readMetadata
microsoft.storage/storageaccounts/fileServices/providers/microsoft.insights/diagnosticsettings/readMetadata
microsoft.storage/storageaccounts/fileServices/providers/microsoft.insights/metricdefinitions/readMetadata
microsoft.storage/storageaccounts/fileservices/shares/readMetadata
microsoft.storage/storageaccounts/providers/microsoft.insights/diagnosticsettings/readMetadata
microsoft.storage/storageaccounts/providers/microsoft.insights/metricdefinitions/readMetadata
microsoft.storage/storageaccounts/queueservices/providers/microsoft.insights/metricdefinitions/readMetadata
microsoft.storage/storageaccounts/queueservices/queues/readMetadata
microsoft.storage/storageaccounts/queueservices/readMetadata
microsoft.storage/storageaccounts/readMetadata
microsoft.storage/storageaccounts/tableServices/providers/Microsoft.insights/diagnosticsettings/readMetadata
microsoft.storage/storageaccounts/tableServices/providers/Microsoft.insights/metricDefinitions/readMetadata
microsoft.storage/usages/readMetadata