Two features: multi-vendor admin management (invite/create, remove, reset password/MFA) and shared account settings page (profile, password change with current-password verification, MFA self-service). Includes consolidation plan extracting user-level identity operations from TenantPortalService into new AccountService. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>