A department needs to view approved dashboards but must not edit them. What permission approach is most suitable?

1. Grant the required read/execute access through a suitable role without write privileges
2. Give every department member Full Control
3. Make the source database publicly writable
4. Share the catalog administrator account