Operators authenticate with Cognito. Membership in the operator group is required to view devices or open SSH tunnels.