ursa major solar has a private sharing model on opportunities. leadership has asked the administrator to create a new custom object that will track customer payment information and will link to the opportunity. only those users with access to the opportunity should be able to see the records on the new object. what should the administrator create to achieve this goal?