Yes, you need to asign them a permission level which has permission "create alerts" in it. You can create a new permission level, so it doesn't affect existing ones and then assign to these users this permission level for the folder and it's content.
You should also check on which page they are getting the access denied and give them permissions to this page as well.