Access is invite-based right now
There is no public signup API on the current backend. New users should be created through tenant invites by an admin or manager.
Safe current flow: an existing tenant admin/manager invites the user, shares the temporary password, and the user logs in and sets a new password.