Who can see what

FEP addresses sign in with Microsoft 365. Everyone else gets an emailed passcode. Removing someone locks them out straight away.