Best Practices Assessment for Azure-Arc SQL Server

Question

Hi Team, We need to enable Best Practices Assessment (BPA) feature for azure arc enabled SQL servers in 2 subscriptions. What access at what scope is required for enabling this. I have contributor role at subscription level for one and could select the log analytics workspace. Have built-in contributor role (excluding write access on tags) at other subscription but unable to select the log analytics workspace in this subscription. Using this same custom contributor I am able to select the log analytics workspace to enable BPA at another subscription which is really confusing as MS docs says log analytics contributor access is enough. Request some guidance on the RBAC required for each resource enabling BPA for arc enabled sql. TYIA