A departing employee had access to resources across several cloud providers. What should the access-removal process cover?

1. Waiting for the employee's next successful login to decide what to revoke
2. The relevant federated identities, local assignments, credentials, and service-specific permissions
3. Only renaming the employee's largest database
4. Only deleting a shortcut to one cloud console