An organization wants to group Azure spending reports by department without moving resources to different resource groups. Which metadata should it apply consistently?

1. A user's password
2. A blob access tier
3. A department tag on relevant resources
4. An availability zone number