Staff email maps to a CRM user row. Cloudflare Access can auto-login approved staff in production.
Leave blank only for the bootstrap admin session.