A central network team must control addresses while separate DBAs provision databases. Which current service capability supports this separation?

1. A public IP address assigned to each database user.
2. One shared organization owner credential for all teams.
3. ODB Networks and ODB Subnets with separate network and database roles.
4. Application SQL roles assigned directly as VPC route tables.