They get their own login. Nobody shares a password, and removing someone ends their access without touching a single record.