A user has SELECT on a table but cannot traverse its parent catalog and schema. What additional privileges are typically needed?

1. CREATE EXTERNAL LOCATION globally
2. Permission to manage all service principals
3. USE CATALOG and USE SCHEMA
4. Ownership of every metastore