Which three steps are required to prevent someone from accessing some accounts but not others?

Which three steps are required to prevent someone from accessing some accounts but not others?
A . Assign a Currency to the account
B . Use the NetSuite default standard role
C . Customize the role to restrict access by segment
D . Designate Department | Class | Location on the account
E . Tag the Employee record to Department | Class | Location

Answer: C.D.E