A GoldenGate deployment requires credentials stored in Secret Manager. Which permission category matters in addition to GoldenGate roles?

1. SELECT on an unrelated application's report table.
2. Permission to delete every project in the organization.
3. Access to the required secret version, scoped appropriately.
4. Permission to edit only public DNS registrar contacts.