> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tangoanalytics.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Permissions reference

> Overview of how roles and permissions control access in Tango Lease.

Tango uses role-based access control (RBAC). Roles are assigned by your system administrator and determine what each user can view, create, edit, approve, and delete.

## Role categories

| Category | Typical responsibilities |
| - | - |
| Lease Administrator | Abstract leases, enter recurring costs, submit for approval |
| Lease Accounting | Create and manage accounting schedules, post periods |
| Rent Approver | Approve recurring costs and individual payments |
| Lease Reviewer / Manager | Approve lease abstractions |
| Batch Approver | Approve payment batches |
| Reporting | View-only access to reports and dashboards |
| Administrator | Full system access including setup and configuration |

## Action-to-role mapping

| Action | Required role |
| - | - |
| Create a new lease | Lease Administrator or higher |
| Submit a lease for approval | Lease Administrator |
| Approve / reject a lease | Lease Reviewer (linked as internal contact) |
| Submit a recurring cost for approval | Lease Administrator |
| Approve / reject a recurring cost | Rent Approver (linked as internal contact) |
| Submit a payment for approval | Lease Administrator |
| Approve / reject a payment | Rent Approver (linked as internal contact) |
| Create / approve a batch | Batch Approver |
| Create an accounting schedule | Lease Accounting |
| Approve an accrual batch | Lease Accounting Approver |
| Post periods manually | Lease Accounting (non-integration companies only) |
| Terminate a workflow | Administrator or designated role |
| Access service logs | Administrator |

## Internal contacts and workflow

Approval workflows require the approver to be linked as an **internal contact** on the specific lease with the appropriate role. Without this link, the system does not allow submission.

Common internal contact roles:

* **Lease Reviewer** / **Lease Administration - Manager** — required for lease approval
* **Rent Approver** — required for recurring cost and payment approval
* **Lease Accounting - Analyst** — used for accounting team assignment

<Info>Internal contacts must be existing system users. External contacts (landlords, property managers) do not have system access and cannot be assigned to approval roles.</Info>

## Setup configuration

Location and lease setup permissions are typically restricted to Administrators. The following setup areas are controlled by admin-level roles:

* Location creation (via Mapping module)
* User management and role assignment
* Approval workflow configuration
* Integration and service log access
* Default allocation configuration

Contact your Tango system administrator to request role changes or to review the full permissions matrix for your implementation.