An analyst needs a privileged role temporarily to contain a confirmed compromise. Which access approach is best?

1. Activate a scoped eligible role with the required approval and audit controls
2. Grant the entire security group permanent ownership
3. Share a permanent global administrator password
4. Disable role auditing for urgent actions