The property manager’s files and a half-built portal used shared logins. Vendors and summer staff could open tenant documents and owner statements that were not theirs.
We rebuilt access in the app: named accounts, MFA, and roles for staff, owners, tenants, and vendors. Old shared passwords were retired. Offboarding is a switch in the admin screen, not a hope that someone changed a password.
The same portal still runs the day-to-day work. The difference is who can open which record.