Your access is controlled by your CRM role. Provider passwords, OAuth tokens and bank credentials stay in protected server-side storage and are never shown back in the browser.