A workload's Object Storage call fails after a resource-principal configuration change. Which pair should be examined? Select TWO.

1. Whether the model's validation accuracy improved
2. Whether the group's policies authorize the requested bucket operation
3. Whether all users share the same notebook browser session
4. Whether the resource still matches the intended dynamic-group rule