Pilot operations console. Accounts are provisioned out of band; there is no sign-up. Admin roles are granted individually and every denied call is recorded as a security event.