An Azure workload needs an identity that should be deleted with its owning resource. Which managed identity type directly follows that lifecycle?

1. A shared human account
2. User-assigned managed identity
3. System-assigned managed identity
4. A DNS alias