A platform team creates the database through OCI IAM. An application still cannot log into its schema. What distinction matters?

1. OCI resource permissions and database-user authentication are separate access layers
2. A private endpoint eliminates database authentication
3. Console access always grants all SQL privileges
4. An application display name doubles as its password