A scheduled job should run with stable production authority rather than a developer's changing permissions. Which identity setting should be evaluated?

1. Anonymous data writes
2. An appropriate run-as service identity with least-privilege access
3. Every caller's unverified text identity
4. A shared personal token published in source