> For the complete documentation index, see [llms.txt](https://docs.ai.insly.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ai.insly.com/nora/onboarding/web-app-access-and-roles.md).

# Web app access and roles

## What it is

Who can log in to the Nora web app (studio.ai.insly.com) and what they can do. Senders who only email never need a login.

## What you decide

* A role for each user:

| Role     | Can do                                          |
| -------- | ----------------------------------------------- |
| Viewer   | See submissions and extracted data; no changes. |
| Editor   | See and correct data; cannot export.            |
| Approver | See, correct and export to Ledger.              |

## What to send us

* Per environment: email address + role for each user. For Prod, “same as Demo” is enough if that’s the case.
* Whether two-factor authentication should be set up in the tenant.

## When

* Demo: 🟡 **TESTING**
* Prod: 🟢 **GO-LIVE**

## Good to know

* Anyone who pushes quotes into Ledger must be an Approver.
* Two-factor authentication will be set up at first login, if required.

Related: [Role-based access](/nora/skills/role-based-access.md), [Multi-factor authentication](/nora/configuration-guide/multi-factor-authentication.md)