Operations access only. Signing in proves the password; access is then checked against the operations allowlist.