Executive, finance and system administration access with 2FA protection.
New users without an authenticator secret will be guided to set up 2FA after their first login.
