A developer can manage instances in an application compartment but cannot launch an instance using a VCN in a shared-network compartment. What should the administrator examine?

1. Whether the developer can delete every tenancy policy
2. Whether the instance title matches the VCN title
3. The additional network-resource permissions required in the shared-network compartment
4. Only the developer's browser cache