Operator access only. Password verification creates a short-lived challenge. A durable admin session requires a second factor.