An application acts on behalf of a signed-in user and must remain limited by the user's access as well as the app's granted scope. Which permission type applies?

1. A resource tag
2. Application permissions as necessarily requiring an interactive user
3. Delegated permissions
4. A storage access tier