This turned out to be poor UX design.
If you first set “Model Capabilities” to “Request”, then unset any permissions you don’t want it works correctly. In both cases it shows “Mixed” for that which is very confusing.
Indistinguishable permissions - yet one works and the other doesn’t.
