# Account access guides

How teams share accounts, hand work to staff and contractors, and keep track of who signed in, by topic.

- [Managing shared accounts](/guides/shared-accounts): Why accounts that several people use don't go away, and how to keep a record of who used them. (25 articles)

- [Managing client accounts at an agency](/guides/agency-accounts): How to manage clients' social, ad, store and help desk accounts, who gets in, what gets recorded, and what to do when staff change. (24 articles)

- [Letting a vendor use your company's accounts](/guides/outsourcing-access): What US rules require when an outside firm works in your company's systems, how to hand over access, and what to do when the contract ends. (11 articles)

- [Managing privileged accounts](/guides/privileged-access): Who should hold admin rights to your cloud and SaaS consoles, how to run the admin logins that stay shared, and how to record who used them. (10 articles)

- [Healthcare account access](/guides/healthcare-access): How HIPAA's Security Rule applies to the logins in your EHR, practice management system, telehealth platform and payer portals, including logins used by billing companies and other vendors. (18 articles)

- [Managing HR and recruiting accounts](/guides/hr-access): How to let recruiters, seasonal staff and RPO partners use job board and HR system accounts, protect applicant and employee data, and turn access on and off as people join and leave. (8 articles)

- [How companies manage sign-ins to cloud apps](/guides/access-basics): Single sign-on, identity providers, multi-factor authentication, passwordless sign-in and zero trust, and how a company uses them to control who signs in to its cloud apps. (22 articles)

- [Laws, frameworks and account access](/guides/compliance): The US laws, regulations and frameworks that ask for access controls on accounts, what each one asks, and how to tell which ones apply to your company. (20 articles)

- [Account and password incidents](/guides/incidents): Cases from US agency and court records, sorted into four types, to help you check how your company handles former staff, vendors, shared passwords and brand social media accounts. (14 articles)

## Recently updated

- [How companies manage sign-ins to cloud apps](/guides/access-basics) — How companies manage sign-ins to cloud apps — October 16, 2026

- [What's the difference between an audit log and audit evidence?](/guides/access-basics/audit-log-vs-evidence) — How companies manage sign-ins to cloud apps — October 16, 2026

- [What a browser extension can and can't control in access management](/guides/access-basics/browser-extension-access-control-scope) — How companies manage sign-ins to cloud apps — October 16, 2026

- [What work data stays on a personal computer, and how to keep it off](/guides/access-basics/byod-leave-no-business-data) — How companies manage sign-ins to cloud apps — October 16, 2026

- [Options for letting staff use personal devices for work systems](/guides/access-basics/byod-options-mdm-vdi-browser) — How companies manage sign-ins to cloud apps — October 16, 2026