Endpoint response should be delegated to a regional team without granting control over all devices. Which two controls should be evaluated? Select TWO.

1. A public endpoint inventory with every credential
2. A shared unrestricted administrator identity
3. The corresponding role permissions and automation settings
4. Appropriate device grouping