A user does not have an identity$-$based policy and requires access to a storage resource but is denied access. Which of the following do you need to do in order to allow him access?

Question $4$ options:

Assign an identity$-$based policy to the user to allow access

Assign an override for any deny attribute in the identity$-$based policy

Remove the deny from the resource$-$based policy

Change the deny to an allow permission on the resource$-$based policy