Exam PL-600 topic 2 question 11 discussion

You are designing a model-driven app that allows a company to manage sales opportunities.
The company has a complex security model that includes the following requirements:
✑ The vice president of sales must be able to see opportunities for sales managers and sales representatives.
✑ Sales managers must be able to see opportunities for all sales representatives.
✑ Sales representatives must only see opportunities that they own.
You need to recommend security tools for controlling user access.
Which two tools should you recommend? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.