A business account can become difficult to recover if it depends on personal contacts no longer available. Management should provide for an authorised and understandable path. The aim is to allow continuity of service while maintaining the identity verifications and protections provided by the provider.
I propose to check what contact details and responsibilities are associated with the relevant accounts. Sensitive information must be kept in accordance with appropriate procedures. A freely shared list of credentials can create additional problems and does not replace proper access and authorization management.
Let's imagine an operationally registered service to a person who changes roles. Recovery may require a confirmation that that person can no longer provide. A prior verification of references makes it possible to organize the passage through the authorized functions of the service.
The route should be updated when changing people or tools. Verification should be coordinated with the relevant support team, avoiding impromptu evidence on essential accounts. An organized recovery makes recognizable who can intervene and maintains the continuity of the activity without weakening the control over accesses.