These are the actions that can meet the requirement of restricting access to opportunities based on ownership and account association. Setting opportunity access on the role allows users to see opportunities owned by users below them in the role hierarchy, as well as opportunities associated with accounts they can access.
Setting organization-wide defaults for opportunities to Private means that users can only access opportunities they own, unless they are granted access by other means, such as sharing rules or manual sharing.