Each persona has the roles and data access of a real user type. Staff sign-in asks for a verification code.