Nobody registers for the back office. An admin invites an operator by email from Automation → Operators; the operator then signs in at admin.securemylegacy.cloud with that address, using the same sign-in provider as the client app (email and password, Google, or a passkey).

​
Not an operator

Signing in with an address that is not on the operator list shows Not an operator with the address, a Sign out button and a link to the client app. Ask an admin to invite you, or, on a fresh deployment, add the address to the ADMIN_EMAILS environment variable so the first admin can get in and invite everyone else.

​
Roles

Roles are ordered. Each one can do everything below it. Your role shows as a badge next to your name at the bottom of the sidebar. A screen you can read but not change shows its controls disabled, with a note such as Your role cannot approve this step or Only an admin can change settings; you can read them.

​
The sidebar

Eight items: Dashboard, Cases, Approvals, Mail, Knowledge base, Automation, Audit log, Settings. Three carry counts: approvals waiting, mail needing a case, and knowledge-base entries needing review or with research ready. When dry run is on, an amber notice at the bottom of the sidebar says so: emails, webhooks and API calls are recorded, not sent.