Named accounts for AlêBuca people. Owner: everything here. Ops: onboarding and security pauses, no rule changes. Support: read-only. Nobody on staff sees a company's content unless that company's admin grants support access.
Each company signs in at its own address: /portal/<address>, ready for <address>.nehemiahlayer.com. Set the address once, then invite the company's first admin.