The user who clicks that link also needs to have the "Owner" role on their subscription.

This assignment typically needs to be added as it's admin is not typically setup that way by default. If they are not an owner, they'll get this error when they try the deployment:
The current user is a classic administrator on the subscription '...'. The user needs Microsoft.Authorization's Owner role on the subscription to create managed services resources.