Restricted — administrators only
After password, a one-time email code is required (2FA). Wrong password 5 times locks sign-in for 24 hours.