Every account that signs in with e-mail + password — agency staff and client users. Admins create accounts and issue/reset temporary passwords here; operators change their own password once signed in.