diff --git a/package-lock.json b/package-lock.json
index 389b295..8530551 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12364,14 +12364,14 @@
       }
     },
     "node_modules/loopback4-helmet": {
-      "version": "7.0.2",
-      "resolved": "https://registry.npmjs.org/loopback4-helmet/-/loopback4-helmet-7.0.2.tgz",
-      "integrity": "sha512-4+iXtnHh7Azoat5c7WWetHoQ6934ynb0m/+Za20sA9E95n43WhQP6/yC3b2jAibfQGWN6/gvk9/MCKacMHUOIQ==",
+      "version": "7.0.3",
+      "resolved": "https://registry.npmjs.org/loopback4-helmet/-/loopback4-helmet-7.0.3.tgz",
+      "integrity": "sha512-jPqTtPBuTUUT6NJe/L6A0BNEsGfnUq+j5lF52/m7OnTGZOtnFMdfPzWxEAL208QxTVR6IhOqEeArA6m1vy02Rg==",
       "dependencies": {
-        "@loopback/boot": "^7.0.2",
-        "@loopback/context": "^7.0.2",
-        "@loopback/core": "^6.0.2",
-        "@loopback/rest": "^14.0.2",
+        "@loopback/boot": "^7.0.9",
+        "@loopback/context": "^7.0.9",
+        "@loopback/core": "^6.1.6",
+        "@loopback/rest": "^14.0.9",
         "helmet": "^5.1.1"
       },
       "engines": {
@@ -12398,22 +12398,22 @@
       }
     },
     "node_modules/loopback4-soft-delete": {
-      "version": "10.0.2",
-      "resolved": "https://registry.npmjs.org/loopback4-soft-delete/-/loopback4-soft-delete-10.0.2.tgz",
-      "integrity": "sha512-FWnsoYn3oiEYfKGsDbqjknmbCbGxPXBn8Lxl4LDlz4poVWpY7daRKTVnTGwpd9RbxPZndvrPUOWCNP/3p+9KLQ==",
+      "version": "10.0.3",
+      "resolved": "https://registry.npmjs.org/loopback4-soft-delete/-/loopback4-soft-delete-10.0.3.tgz",
+      "integrity": "sha512-QgcqBJd488YqIo08aopKx7YhoqyPttxxLOI5lhEsYdr1GOgB8rUceSRiI1xM5e5ayUZvMN8e2fSsoUETjPN3iw==",
       "dependencies": {
-        "@loopback/core": "^6.0.2",
-        "@loopback/rest": "^14.0.2",
+        "@loopback/core": "^6.1.6",
+        "@loopback/rest": "^14.0.9",
         "lodash": "^4.17.21"
       },
       "engines": {
         "node": ">=18"
       },
       "peerDependencies": {
-        "@loopback/boot": "^7.0.2",
-        "@loopback/context": "^7.0.2",
-        "@loopback/repository": "^7.0.2",
-        "@loopback/sequelize": "^0.6.2",
+        "@loopback/boot": "^7.0.9",
+        "@loopback/context": "^7.0.9",
+        "@loopback/repository": "^7.0.9",
+        "@loopback/sequelize": "^0.6.9",
         "loopback-datasource-juggler": "^5.0.9"
       },
       "peerDependenciesMeta": {
diff --git a/services/subscription-service/src/models/dto/payment-dto.model.ts b/services/subscription-service/src/models/dto/payment-dto.model.ts
index af719db..7d00484 100644
--- a/services/subscription-service/src/models/dto/payment-dto.model.ts
+++ b/services/subscription-service/src/models/dto/payment-dto.model.ts
@@ -1,4 +1,4 @@
-import {model, Model, property} from '@loopback/repository';
+import {AnyObject, model, Model, property} from '@loopback/repository';
 
 @model({
   name: 'payment_source_dto',
@@ -19,7 +19,6 @@ export class PaymentSourceDto extends Model {
   @property({
     type: 'object',
     name: 'card',
-    required: true,
     jsonSchema: {
       type: 'object',
       properties: {
@@ -38,8 +37,12 @@ export class PaymentSourceDto extends Model {
       ],
     },
   })
-  card: ICard;
+  card?: ICard;
 
+  @property({
+    type: 'object',
+  })
+  options?: AnyObject;
   constructor(data?: Partial<PaymentSourceDto>) {
     super(data);
   }
diff --git a/services/tenant-management-service/src/services/lead-authenticator.service.ts b/services/tenant-management-service/src/services/lead-authenticator.service.ts
index 1208fbe..cf008c3 100644
--- a/services/tenant-management-service/src/services/lead-authenticator.service.ts
+++ b/services/tenant-management-service/src/services/lead-authenticator.service.ts
@@ -55,6 +55,10 @@ export class LeadAuthenticator {
       PermissionKey.DeleteBillingCustomer,
       PermissionKey.DeleteBillingPaymentSource,
       PermissionKey.DeleteBillingInvoice,
+      PermissionKey.CreateTenantConfig,
+      PermissionKey.ViewTenantConfig,
+      PermissionKey.DeleteTenantConfig,
+      PermissionKey.UpdateTenantConfig,
     ]);
     const randomKey = this.cryptoHelperService.generateRandomString(
       +process.env.LEAD_KEY_LENGTH!,