Single-location v1 — accounts are created by an admin, not self-serve.