You need to recommend a solution to meet the security requirements of the junior database administrators. What should you include in the recommendation?

A server role grants server-level permissions broadly, which would not restrict or secure access in the granular way required for junior DBAs who should have limited, controlled access.

A database role grants database-level permissions to users but does not address the need to securely delegate access to external resources or mask authentication credentials from junior administrators.

A SQL Server credential is a record that contains authentication information needed to connect to a resource outside SQL Server. It allows junior DBAs to perform specific tasks (such as running jobs or accessing external resources) without being granted direct login permissions or knowing the underlying passwords. This provides a secure delegation model where administrators can operate under controlled, mapped identities without exposing sensitive authentication details.

A shared login would reduce security by having multiple users share the same authentication identity, making it impossible to audit individual actions and violating the principle of least privilege.