CBill only requires read-only permissions your billing and budgets data. The particular role names vary by cloud provider. These allow us to prepare reports and issue alerts where relevant and can be revoked at any time.
No. Alerts are configurable by channel. You can even configure alerts for a specific user!