### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### The Feature

Allow users with the `internal_user_viewer` role to **view/read the Models list** in the Proxy UI (Models + Endpoints), without create/edit/delete permissions. Today, `internal_user_viewer` cannot usefully see the models page / models list. We would like read-only access so these users can discover available model names for client configuration.

<img width="840" height="325" alt="Image" src="https://github.com/user-attachments/assets/f935803c-03e7-43f1-8604-8214619dd9ca" />

Desired behavior: 1. `internal_user_viewer` can open Models page and see the allowed model list 2. Write actions remain disabled (add/edit/delete model) 3. If Models page UI permissions cannot change soon, please confirm the recommended read-only discovery path (e.g. another UI) Questions: - Is blocking Models list for `internal_user_viewer` intentional? - Can Models list read access be supported for this role?

### Motivation, pitch

In our company setup, many employees are provisioned as `internal_user_viewer` (read-only). They need to know which model names are available t…