An agent serves internal employees and can access private business records. What should be decided before selecting knowledge sources and channels?

1. The audience identity model, permitted data scope, and supported authentication flow
2. Assume all future callers are employees without authentication
3. Only the agent's avatar
4. Make every source anonymous to simplify integration