A cloud administrator can view the database resource but should not read sensitive SQL tables. What should be maintained?

1. No database authentication on private endpoints
2. One shared database administrator account for every cloud operator
3. A rule that viewing a resource always grants SELECT ANY TABLE
4. Separation between OCI management permissions and database data-access grants