One password opens the office and the email decides which role you carry inside it — roles govern what each screen draws and what every write accepts. Per-person credentials arrive with the admin-users table.