They get an email to set a password and turn on two-step sign-in
Their work email.
The role decides what they see; stores limit where.