A shared login (one password everyone uses) makes it impossible to tell who did what, and it can't easily be revoked for one leaver without disrupting everyone else. Where the software allows it, give each person their own account, even a free or basic one, and use role-based permissions instead.
Coach's tip: if a tool genuinely only supports one login, put it behind your password manager's sharing feature so nobody sees the raw password.
Book a free tech audit. A 45-minute call and a written summary, no obligation.