Operators need to stop and start databases but should not broadly administer unrelated tenancy resources. What is the correct policy direction?

1. Put the limitation only in a team wiki
2. Grant tenancy-wide administrator access for convenience
3. Scope IAM permissions to the required database operations and compartments
4. Use the database's display name as a password