A monitoring engineer needs to query dynamic management views (DMVs) such as sys.dm_exec_requests and sys.dm_os_wait_stats across an Azure SQL Database to diagnose performance issues. Company policy mandates least privilege, and the engineer must not be able to read or modify any application table data. Which approach grants exactly the required access?