Phone OTP only. Operators can access only their own venue records and live actions.