One account model, four roles. Role is assigned server-side and checked on every request — never chosen by the client.
After sign in, users land on the home screen for their role.