Eligible users need to recover forgotten passwords using registered verification methods without a routine help-desk ticket. Which capability fits?

1. Self-service password reset
2. Privileged Identity Management alone
3. Retention policies
4. Microsoft Sentinel playbooks as the directory feature