An administrator can inspect an OKE cluster in OCI but cannot list pods in a namespace. What should be checked?

1. Whether the portal image is stored in an object bucket
2. Both OCI IAM access and the relevant Kubernetes RBAC permissions
3. Whether the application uses a newer logo
4. Only the cluster's display-name length