Share a dashboard and web app metrics with least privilege?

Hi, we have an Azure Web App publicly accessible.

I'd like to share the web app metrics through a shared dashboard to an internal customer who is in our MS Entra. 

Everything for the web app is contained in a single Resource Group including the dashboard.

For the RBAC assignment, is Monitoring Reader on the Web App

and Read on the Dashboard appropriate or is there some other role that would be lesser privilege?

All I want is for them to be able to read the dashboard and metrics in the tiles.