A project needs a request-and-approval process that grants a bundle of group and application access for a limited assignment period. Which capability should it evaluate?

1. Entitlement management with access packages
2. Azure DNS private zones
3. A file checksum
4. A single shared administrator account