Owner-only. Your password opens the operational roster; opening Finance asks for a dual-TOTP step-up.