The primary client contact controls the account. You may add contacts in the client area. We will not give FTP/SFTP or billing changes to unverified third parties.
Agencies working on your site should be added as authorised contacts or use credentials you create and can revoke.