Which of the following practices reduces the management burden of access management?

Password complexity policies define rules for password strength but do not reduce the burden of assigning and managing access rights to resources.

User account audits are a review activity that verifies existing access assignments but do not streamline the process of granting or revoking access.

Log analysis and review is a detective control for identifying suspicious activity and does not reduce the administrative effort required to manage user access.

Group-based privileges allow administrators to manage permissions at the group or role level, so adding or removing a user from a group automatically grants or revokes all associated access rights. This significantly reduces administrative burden compared to per-user permission management and enforces consistent access policies across users with the same job function.