Direct answer
Most property management firms start with one login. The founder sets up the system, shares the password with the first hire, then the second, and three years later eight people are using the same account and nobody can say who changed a tenant's rent or deleted a payment. Access control sounds like an IT problem. In a business that holds tenants' details, landlords' money and the record of who paid what, it is a business problem. This guide covers how to set up staff access properly, from roles to offboarding.
Designing roles
Roles group permissions so you are not deciding access person by person. Four roles cover almost every property business, from a two-person agency to a large estate office. Keep the number small. Every extra role is one more thing to explain and one more place for mistakes.
Give the Owner role to one person, and make sure at least one Admin exists so the business is not locked out if the owner is unreachable. Most of the team should sit at Manager. Viewer is the right answer for anyone who needs to look but not touch: an external accountant at year end, a partner checking a client file, or a landlord's representative reviewing records before a meeting.
| Role | Typically held by | Can usually | Should not |
|---|---|---|---|
| Owner | Founder or principal partner | Everything, including billing and team settings | Be shared with anyone |
| Admin | Operations lead or office manager | Run the whole portfolio and manage the team | Be given to every senior hire by default |
| Manager | Property or estate manager | Run day-to-day work on their assigned properties | See properties they do not manage |
| Viewer | Accountant, auditor, partner reviewing a file | Read records for assigned properties | Change anything |
Least privilege and property assignment
Least privilege means each person has the access their job needs and nothing more. A property manager running three buildings in Lekki does not need to see the firm's Abuja portfolio. An accountant reconciling one landlord's account does not need to edit leases.
The most useful control in a property business is not the role itself but the assignment of people to properties. A manager role scoped to specific properties means that manager sees only those tenants, those payments and those reports. When a building changes hands within the team, you change the assignment, not the person's role.
Review assignments whenever the portfolio changes: a new landlord client, a building handed back, a manager moving to a different area. Access that made sense a year ago is often wider than it should be today.
Offboarding a staff member the same day
When someone leaves, their access should end the day they leave, not when someone remembers. That is easy with individual logins and almost impossible with a shared one. Write the steps down so they happen regardless of who is in the office.
- Remove their access to the property management system on their last day
- Reassign their properties to another manager so nothing is left unowned
- Review the activity log for their last few weeks
- Collect any company phone, including a gate phone if they used one
- Remove them from staff WhatsApp groups that carry tenant or landlord details
- Change any password that was genuinely shared, such as a bank portal
- Tell landlords and residents who should now be their contact
Audit trails
An audit trail is a record of who did what, and when. It is how you answer a landlord who asks why the arrears figure changed, a resident who says their payment was recorded and then disappeared, or a partner who wants to know who issued a refund.
A good audit trail is readable by a person, not just a developer. It should say in plain words that a named staff member recorded a payment, edited a lease or invited a colleague. It should be filterable by person and date, and exportable, so you can hand it to an auditor or attach it to a file.
The Nigeria Data Protection Act 2023 sets general expectations for organisations that process personal data, including taking appropriate measures to protect it. Individual logins, scoped access and an audit trail are the ordinary way to show you take that seriously. Confirm your specific obligations with a lawyer.
Common mistakes
Most access problems are habits rather than technology failures. These are the ones we see most often.
- One shared login for the whole team
- The password on a sticky note on the office monitor or the gatehouse wall
- Giving every new hire admin access because it is quicker
- Never removing former staff, interns or contractors
- Assigning a manager to the whole portfolio when they run two buildings
- No one reviewing the activity log until something has already gone wrong
- Sending invites to personal email addresses that are then forwarded on
How Ledge helps
Ledge supports multiple users from the Growth plan, and roles from the Agency plan and above. The roles are Owner, Admin, Manager and Viewer. Managers and Viewers are assigned specific properties and see only those, including in search, reports and payments. Each person has their own login, so there is no shared password to pass around.
Invites expire after 72 hours, so an invitation sent to the wrong address does not sit open indefinitely. An Activity log records who did what in plain sentences, can be filtered, and can be exported to CSV for an auditor, a landlord or a partner reviewing a file.
Universal search respects the same boundaries: each team member only sees results for the properties they are assigned. This is general guidance on access control, not legal advice on data protection.
Your first week
If your team is still on a shared login, you can fix it in a week without disrupting anyone.
- Day 1: list every person who uses the system and what they actually do
- Day 2: decide each person's role and which properties they need
- Day 3: send individual invites and ask people to accept them that day
- Day 4: retire the shared login
- Day 5: write the offboarding steps and put a monthly access review in the calendar
Frequently asked questions
What roles does a property management team need?
Four cover most businesses: an Owner who controls the account, Admins who run the portfolio and the team, Managers who run day-to-day work on assigned properties, and Viewers who can read but not change records.
Should every property manager see every property?
No. Assign managers to the properties they actually run. It reduces mistakes, protects tenant and landlord data, and makes it clear who is responsible for each building.
What should happen when a staff member leaves?
Remove their access on their last day, reassign their properties, review the activity log for their recent work and collect any company devices. With individual logins this takes minutes and does not affect anyone else.
Why does an audit trail matter in property management?
Because money and records change hands constantly. An audit trail shows who recorded a payment, edited a lease or issued a refund, which is how you answer landlords, residents and auditors with facts rather than recollection.
Next step
Give every team member their own access
Individual logins, four clear roles, property assignment and an activity log you can export, so you always know who did what.