A manager asks for a contractor's read access to be removed at the end of the engagement. What should the administrator verify?

1. Only the absence of a direct SELECT grant on one table
2. Direct and inherited group grants so effective access is removed
3. Only that the contractor has stopped the SQL warehouse they used
4. Only that the contractor's personal dashboard is unpublished