A LEM Contact cannot log in to the web console. They're place-holders for e-mail addresses, so users can receive e-mail notifications, but have no log in rights.
A LEM Alerts Only user can log into the web console and receive alerts from the LEM web console, but has no administrative rights or access.