An employee needs a set of permissions normally assigned together for a support function. Which approach is easiest to maintain?

1. Share a service-desk account
2. Assign appropriate roles through a managed group
3. Grant admin to every employee
4. Hide unrelated modules without roles