Universal Containers (UC) has a private Organization-Wide Defaults (OWD) model for the Account object and needs to control the access of records and fields according to these requirements: Sales reps can view/edit only their own records and cannot access the field “segment” in account page. Service reps need to view all accounts but cannot edit any information. Sales managers can modify any account of reps reporting to them. Service managers can modify any account. How can a Salesforce architect provide an optimal solution for this scenario?