Mail, calendar, customers, workshop and invoices: one portal for the whole team, with access you can see.
Your work account: email address and password.
Protected with a second factor if you switch it on, and every sign-in is logged.
Running the workspace and reading its mail are separate rights. Every grant is explicit and lands in the audit log.
Password with lockout, optional authenticator app, a list of your devices, and Microsoft sign-in where it exists.
The assistant knows your day, your tasks and the team feed, suggests and never changes data by itself.