New accounts have no access until an admin assigns a role.