Sharing access with a contractor

Do not hand over the manager’s password. Create a limited sign-in named for the task, and write its close date on the day it is opened.

After handover, remove the sign-in and check that sessions were closed. Keep the name of who approved it, not a screenshot that shows secrets.

This is a permission arrangement. Not a contract form and not an audit of the vendor.