An enterprise uses Microsoft Entra identities and wants controlled access across providers. Which design principle is appropriate?

1. Treat federation as automatic authorization to every database schema.
2. Use one shared local account for every cloud and database operation.
3. Plan identity federation and granular Azure RBAC and OCI policies together.
4. Disable all Azure policy controls to make Oracle identities work.