An organization needs to grant a department access to file resources without assigning permissions separately to each employee. What is the best approach?

1. Use appropriately scoped security groups and grant resource permissions to the groups
2. Make every employee a domain administrator
3. Share one user account among the department
4. Grant access through a distribution-only group