Is anything wrong, and where.

Its own address on purpose. It can be handed to whoever is on call without handing over the customer list, and it keeps answering when the thing being looked at is the control plane itself.

• Six roles, and one that only watches A monitoring login opens this and nothing else: no customer list, no plans, no way into anybody's portal.
• Looking is read only Opening a customer's portal from here changes nothing in it, hides salaries, and is written to both audit trails.
• Five wrong tries and it locks Another owner resets it. The last active owner cannot switch themselves off.