What is a recommended approach to restrict a CLM user to specific data?

• A. Assign a role with unrestricted object access and rely on restricted fields.
• B. Assign a role with restricted object access and field visibility; use permission sets or profiles to limit view/edit rights.
• C. Give the user full permissions but hide data via UI themes.
• D. Only restrict via SSO settings.

Answer: (B)