A privileged account is needed briefly for emergency maintenance. Which design best supports control and accountability?

1. Automatic indefinite elevation after any help-desk ticket
2. One permanent shared root password
3. Time-bound elevation with approval and audited actions
4. Disabling session logging during emergencies