Use a global-admin or domain-admin account for the control plane. Mailbox users should go straight to webmail.
Authentication is local-only in v1. This portal does not use external identity providers.
Bootstrap local accounts are managed in /etc/mxcentral/portal/local-users.json.