I figured out how to get the exact permissions and have the device-alias options. There isn't a role feature that includes device-aliases so I had to grant permissions to the specific commands. Here is the custom sanadmin role that works for me.
role name sanadmin
interface policy deny
permit interface fc1/33-48,fc3/1-16
vlan policy deny
vrf policy deny
rule 1 permit read
rule 2 permit read-write feature copy
rule 3 permit read-write feature fcdomain
rule 3 permit read-write feature fcfe
rule 4 permit read-write feature fcmgmt
rule 5 permit read-write feature fdmi
rule 6 permit read-write feature fspf
rule 7 permit read-write feature interface
rule 8 permit read-write feature ping
rule 9 permit read-write feature rdl
rule 10 permit read-write feature rscn
rule 11 permit read-write feature trunk
rule 12 permit read feature snmp
rule 13 permit read-write feature vsan
rule 14 permit read-write feature vsanIfvsan
rule 15 permit read-write feature wwnm
rule 16 permit read-write feature zone
rule 17 permit command config t ; device-alias *
rule 18 permit command clear device-alias *
rule 19 permit command debug device-alias *
