Is it possible somehow to restrict creation of the serving endpoints to specific users? I want to grant Workspace access under the Entitlements of the specific group, but I want not to allow users of this group create serving endpoints.

The only way I see to do this revoke permissions to system.ai schema for all workspace users set by default?