Secure portal
Use email or a passwordless link. Staff roles are assigned only by authorized management.