Open Settings → Team & Permissions. Access should follow job responsibility, not convenience.
Access review
- Identify the person and the work they must perform.
- Choose the smallest role or permission set that enables that work.
- Pay particular attention to Settings, payments, Billing, user administration, and pricing activation actions.
- Save, then verify the result using an appropriate test account or with the user present.
- Revisit access when a person changes responsibilities or leaves the organization.
Never share a user account to bypass a missing permission. Shared accounts weaken auditability and make it harder to remove access safely. If a user cannot sign in or complete a security challenge, use the approved account-recovery path.