Where the function is intended for
At delivery, there are often the owner, family members, employees and an installer. They do not all need to have the same settings or export possibilities.
A recorder becomes difficult to manage once everyone uses the same admin account or nobody knows who is managing the recovery.

At delivery, there are often the owner, family members, employees and an installer. They do not all need to have the same settings or export possibilities.
Distinguish between owner, administrator, viewer, and temporary user. Also check which old accounts or devices still have access via app or browser.
Use unique accounts with minimal necessary permissions and keep recovery information securely with the owner. Do not share administrator passwords via group apps or notes next to the recorder.
Sign in with a viewer account and confirm that settings cannot be changed. Remove a test user and verify that access disappears on all routes.
That depends on the rights; only grant that authority where it is truly necessary.
You then cannot trace or revoke who has had access.