Access is granted by an admin — they reset passwords too. Sessions expire after 12 hours; every change is logged with your name.
Internal tool — not linked from the storefront.