Tenant and operator credentials are issued during onboarding.
The email registered with your tenant.
Two-factor authentication is required for actions on sensitive records. Every session is recorded in the audit trail.