C. Users are given access to the records accessible by the users who are below the role hierarchy.
The owner and system admin normally has the super user account, then they would assign roles and hierarchy to each department heads and members which roles and modules are lower type of user access compared to them.