Administrators should activate privileged roles only when needed rather than hold them continuously. Which capability should the organization evaluate?

1. A larger mailbox quota
2. Privileged Identity Management
3. Permanent broad ownership for every employee
4. A document retention label