Role is a simple in-app gate on one shared password, not per-person accounts — see README. Owner sees everything; staff cannot open Pay, Expenses or revenue Reports.

First time? The password is the one set as CRM_PASSWORD on the Worker (production) or fallbackPassword in crm/config.js (local test mode). Change the placeholder — see README.md.