Appointments, payments, clinicians and everything on the public page.
A second administrator can issue a reset code from Accounts. If nobody can sign in, the password has to be reset directly in the database — there is no email provider on this site, and a link that could be requested anonymously would be a way in for anyone.