Partner access to an application must be reassessed each quarter by designated reviewers. Accounts no longer needed should lose their assignments. Which capability best supports this process?

1. A DNS TTL change
2. Indefinite role assignments with no review
3. A daily VM restart
4. Microsoft Entra access reviews