Access, security, and settings

The account email can sign in with a code. That account can administer the directory. A caller cannot change their own role.

Secret values are not shown here.