@WPalant @thisismissem now I get it. The issue was that he accessed vendor's database. Even if he has the credentials, he is not allowed to use it.

It's like if I found a post-it with password on your PC, I'm still not allowed to use it to login into your account.