Candidates see their own profile. Employers see only shared candidates. Owner/admin uses Admin page PIN.