@lingareddy_Alva thx for detailed explanation could you pls guide me to databricks docs where and how I can use option 3) ?
3. Using Workspace-Level Entitlements
       If you're using Workspace-level entitlements:
           1. Create a custom entitlement that excludes serving endpoint creation.
           2. Assign this custom entitlement to the group instead of using the predefined roles.