Named accounts for the portal. Invites email a set-password link (also shown here as a copyable fallback). The master password stays as break-glass.