Adding an employee

Name and email, and they get an invitation to set a password. Use their own address rather than a shared one: two people behind one login means the record of who did what is worthless, and that record is the reason to have separate accounts at all.