Access is role-based. New sign-ups are provisioned as Virtual Assistant until promoted by the Super Admin.
Sessions, activity, and idle time are tracked for security auditing.