A service bot needs to read one dataset nightly. What authorization is appropriate?

1. An undocumented shared superuser password
2. A dedicated identity with dataset-scoped read access
3. Organization-wide write access
4. The departing administrator's personal account