An analyst only needs to view reports. An administrator proposes granting project-wide Owner access to prevent permission requests. Which principle should guide the decision?

1. Share the administrator’s password
2. Disable audit logs to simplify administration
3. Give every employee Owner access for consistency
4. Least privilege: grant only permissions required for the analyst’s tasks