Thank you, @tom_n. Could you please clarify one point against the permissions documentation?

It says pay-per-token calls enforce the restrictions automatically after enablement, while provisioned-throughput endpoints require manual removal.

Does the legacy databricks-* exception still apply after Foundation model Unity Catalog permissions is enabled? Or does it describe the behavior before enablement? That would help establish whether this account needs the feature enabled, additional endpoint restrictions, or both.