A consultant needs one report, not access to every item in a Fabric workspace. Which approach best follows least privilege?

1. Make the consultant a workspace Admin
2. Share an owner's credentials
3. Make all workspace items publicly accessible
4. Grant appropriate item-level access to the required content