A user should query a table but not modify it. Which grant is the most appropriate starting point?

1. MODIFY on the entire catalog
2. SELECT with required parent usage privileges
3. Ownership of the table
4. MANAGE on every external location