A Function's trigger is configured correctly, but access to its target service fails. What must still be validated independently?

1. Only whether the function name contains the service name
2. Assume configuring a binding automatically grants every required permission
3. Only the user's browser theme
4. The function identity, required data permissions, connection configuration, and network path