Your team deploys foundation models to Azure AI Foundry serverless API endpoints in a shared project. A downstream application team needs to call the deployed endpoints from their own service. Security policy requires least privilege: the application team must be able to invoke deployed models and read deployment metadata, but must NOT be able to create, modify, or delete deployments, model connections, or project settings. You want to use built-in RBAC wherever possible. What should you do?