This is in relation to the component(s) found in /components/update-metadata.
These component loads in and render the existing metadata for a given Project. Therefore the minimum permissions required for the component(s) to load are
READ_METADATA_PROJECT
Users can add, update, or remove metadata. Therefore the minimum permissions to use the full functionality of the update-metadata component are
UPDATE_METADATA_PROJECT