A new workload is added to an OCI Core Landing Zone through a Terraform extension. Its team cannot manage a newly introduced service. What should the architect check first?

1. Whether renaming the compartment to the service name grants access.
2. Whether increasing the subnet address space expands IAM privileges.
3. Whether enabling a budget alert grants administrative access.
4. Whether explicit policies authorize that service in the intended workload compartment.