A collection of the questions Tanca administrators ask most about permissions, with short answers and links to detailed articles.
About roles and access groups
| Question | Answer |
|---|
| Can I create a new role? | No. Tanca has four fixed groups: Manager, Regional Manager, Branch Manager, Employee. If you need a special role, assign the person to the closest group and then grant individual permissions — article C1-04 |
| Can I rename a group? | No |
| Can one person belong to two groups at the same time? | No. Each profile has only one access group |
| Where do I edit the permissions of the Employee group? | The matrix has no column for this group. Adjust per person on the Permissions tab of the profile — article C1-04 |
About the permissions matrix
| Question | Answer |
|---|
| I clicked a cell by mistake — how do I undo it? | Click the same cell again to change it back to the old value. There is no undo button, so take a screenshot before making changes |
| Why is there no Save button? | The matrix saves as soon as you click. The per-person individual permissions screen does have a Save button |
| Users still see their old permissions after I made changes | They need to reload the page or log out and log back in |
| Does the system record who changed permissions? | No. Keep your own permissions log — article C1-07 |
| Which module is the most dangerous? | Settings — anyone with permissions here can edit the permissions matrix itself |
About data scope
| Question | Answer |
|---|
| Can a branch head see other people's salaries? | Not by default. But if you mistakenly assign them to the Manager group, they can — article C1-08 |
| How many people can a Branch Manager see? | Exactly the branch recorded in that person's profile. Leaving the branch blank removes the limit |
| Are regional managers restricted? | Yes, by region. But they can still export files — consider turning off the Export File permission if you need to tighten it |
| Can I restrict down to the department level? | Yes, via the Department field in the profile — article C1-03 |
About accounts and passwords
| Question | Answer |
|---|
| What do I do when an employee forgets their password? | Open their profile and click Reset Password in the top bar — article C1-05 |
| Does Tanca have two-factor authentication? | Not yet available for web accounts |
| Can I remotely log out an unknown device? | Not yet. The workaround is to change the password immediately |
| What do I need to do when someone leaves the company? | Change the profile status, downgrade the access group, and click Reset on their Permissions tab to remove individual permissions |
| A user can access the web but not the app | Check the Permissions › Mobile tab in the profile — the two platforms have separate permission sets |
About reviews and audits
| Question | Answer |
|---|
| Can I see who edited a profile? | Yes, in the History tab of that profile, along with the device and IP address — article C1-07 |
| Is there a system-wide activity log page? | Not yet. Logs are attached to each individual profile |
| Can I export the log to a file? | Not yet. Take screenshots to keep as evidence |
| Does a security score of 100 mean my company is safe? | No. That score only rates the account that is logged in, not the company's permissions configuration — article C1-06 |
| How often should I review permissions? | Monthly for new hires and people who change positions; quarterly, export the employee list to a file and compare it against the org chart |
