An analytics administrator wants fewer individually maintained grants. Which approach supports maintainable access control?

1. Embed access decisions in each chart's colors
2. Assign permissions to well-defined application roles aligned with responsibilities
3. Use undocumented shared passwords for departmental accounts
4. Give every user the same unrestricted administrative role