Each account has a separate route, authorization policy, and community surface. SuperAdmin starts with two-factor setup.