Everyone can request the access type they need, but an admin must confirm higher-access roles before sign-in is enabled. This protects the system from buyers or clients self-assigning agent or asset-manager access.