The legal department requires eDiscovery of hosted file shares. To set up access, which of the following is the BEST method to ensure the eDiscovery analyst only has the ability to search but not chan

PKI is a framework for issuing and managing digital certificates to authenticate identities; it does not control what actions an authenticated user is permitted to perform.

SSO allows a user to authenticate once and access multiple systems, but it does not define or restrict what permissions that user has within those systems.

MFA adds an additional authentication factor to verify identity at login but does not govern the scope of access or actions available after authentication.

Role-Based Access Control allows administrators to define a role with only the specific permissions needed - in this case read and search access to hosted file shares - and assign that role to the eDiscovery analyst. This enforces the principle of least privilege, preventing any configuration or settings changes without granting broader access.