Permissions
The Enforce Azure Compute Disks Are Attached to Virtual Machines policy pack requires 2 permissions:
microsoft.compute/disks/deletemicrosoft.compute/snapshots/write
Policy Packs
Enforce Azure Compute Disks Are Attached to Virtual Machines