A help-desk operator should reset ordinary users' passwords without broad super-administrator authority. Which approach best fits?

1. Configure context-aware access with the necessary licensing and tested conditions.
2. Delegate a suitable limited administrative role.
3. Evaluate security keys or passkeys under the applicable authentication policy.
4. Enforce appropriate two-step verification with a planned enrollment process.