Authorized operators only · all access is logged