Tips
The less user accounts we have, the better we can manage it.
The less permissions the user account has, the better we can manage it.
Staffs should have their own user account.
Staffs should change system generated password on the 1st time login.