I have the same issue with a user. They have the Support Request Contributor role for the resource group and therefore the VM, but they still get the message:
You don't have permission to create a support request
To get permission, ask your subscription administrator or owner to assign you Support Request Contributor role for the selected subscription.
It says subscription but does it really have to be at the subscription level?