Analysts should query approved datasets without permission to change production ingestion configuration. Which approach best fits?

1. Maintain and inspect data lineage.
2. Apply a reviewed retention and deletion policy that accounts for legal obligations.
3. Establish data ownership and catalog governance metadata.
4. Grant separate least-privilege data and pipeline administration roles.