Provision team credentials, configure role presets, and assign explicit CRM module permissions.
User will be prompted to change password upon first login.