Add agent

Onboard a new agent — they get sign-in access to their own workbench.