Every sign-in uses a fresh, one-time email link. No password — your role-based access is granted as soon as you open the link.