Parties role towards employees data for administrative purposes

What role (controller or processor) would you allocate to a vendor who the only personal data processed by them as part of the service provided to client is client’s employees data to login to their service and use it for administrative and support purposes? And how do you argument this?