A Sunbird content reviewer needs application review permissions but no infrastructure administration. Which distinction is essential?

1. An OCI compartment name automatically authorizes all content actions
2. A successful login should imply unrestricted publishing rights
3. Application roles and OCI infrastructure IAM permissions are separate concerns
4. Every content reviewer must be a tenancy administrator