A playbook can disable accounts. What must its execution identity and workflow enforce?

1. Tenant-wide administration for every workflow by default
2. Least-privilege permissions, defined scope, and required approvals
3. Anonymous execution by any user
4. A model suggestion as the only approval