Learning about Access Management

The Access Management module is where the access controls to all of the access points created in Property Builder are configured. While all of the configuration options work together to control access, defining credentials and configuring access to limited-access common areas are principle objectives in Access Management. Scheduling is an optional feature. The following figure summarizes all access configuration options.

Credentials

Credentials are essentially the access rights that are encoded on keys. During the process of adding a credential, you select the access points that you want the credential to authorize. You can add individual access points and access point groups. You can also select a shift schedule for each credential.

Structure of credentials

All credentials in Ambiance are organized into three hierarchical levels:

Credential Class Type > Credential Class > Credential

Credential class types are fixed definitions from which all credential classes are derived. The fixed definition consists of one or more persisting properties. For example, keys encoded with a credential based on an Emergency credential class type always include the property to override a projected deadbolt or privacy switch.

Credential classes merely serve to pass down any property defined for the class type to the credential. The default credential class for each class type bears the same name as the type. For example, the default credential class for the Emergency class type is Emergency.

Credentials are the level at which access is enabled by selecting individual access points and access point groups.

Default credential classes for staff keys

Learn more about each credential class type and the default credential class used to make staff keys:

• Emergency—The principal property of the Emergency class type is that keys encoded with this class always override a projected dead bolt or active privacy switch. As such, reserve this class for senior management and emergency personnel.
• Grand Master—This is a general purpose class intended for the highest levels of access among staff. The class shares the same properties as the Emergency class except that keys never override a deadbolt or privacy switch.
• Master—This is a general purpose class intended for most staff keys.
• Limited Use Staff—The special characteristic that differentiates the Limited Use class is that access is limited to a pre-defined number of times. The limit is specified in System Settings > Staff Keys. For example, if the limit is six, the key opens the lock the first six consecutive times then expires.
• Connector—Guest-level credential class that associates guest room access point types. If the guest rooms are associated with a foyer group, then the Connector class is implicitly applied to the foyer group. An access point can be in only one Connector credential. Access points that are added or removed from a Connector credential require reprogramming.

• For keys made using the Emergency, Grand Master and Master class type, additional access points can be added at key-making time. Additional Access must be enabled in System Settings > Staff Keys.

Default credential classes for system keys

The following credential class types/default classes are used to create credentials for system keys:

• Latch—This class is used to create system credentials that authorize Latch Keys.
• Unlatch—This class is used to create system credentials that authorize Unlatch Keys.
• Toggle Latch/Unlatch—This class is used to create system credentials that authorize Toggle Latch/Unlatch Keys.

Credentials for guest keys

The credential class and credentials used to make keys for guests are implicit. In other words, you don't select a Guest credential class/credential. Instead, the access points selected during guest registration, including any guest rooms, suite rooms, common areas and meeting rooms, form the credential that authorizes entry. If a guest room that is assigned to a Connector credential is selected, all guest rooms associated with that credential are also selected. The Reports module references the Connector credential classes. When selecting options for the Credential/Access Point Assignment Report, you can select the Connector class.

Common areas

Common areas are access points that are configured for general access by guests and/or staff. Guest Common Areas include spaces such as the lobby, parking areas and fitness rooms. Staff Common Areas may include administrative offices, breakrooms and supply closets.

Access to common areas depends on the credential class type selected when making a key and the options selected when the access point was created. The following policies apply to enabling staff access to common areas:

Credential class selected when making a key

• For keys made using the Emergency or Grand Master credential class type, there are two ways to add common area access to staff keys. The common area must either be in the credential selected at key-making time or you select the common area as an additional access point at key-making time (additional access must be enabled).
• For keys made using the Master or Limited Use Staff credential class type, access to common areas depends on whether the common area is a Guest Common Area or Staff Common Area and the options selected when the access point is created.

 Options selected when making the access point

• Unlimited Guest Common Areas
  • If staff access was enabled by Credential Assignment, the common area must be included in the credential selected when making the key. (For the Master class only, you can also add the common area as an additional access point at key-making time if additional access is enabled.)
  • If staff access was enabled by Common Area Access Profile Assignment, access is enabled by default.
• Limited Guest Common Areas
  • If staff access was enabled by Credential Assignment, the common area must be included in the credential selected when making the key. (For the Master class only, you can also add the common area as an additional access point at key-making time if additional access is enabled.)
  • If staff access was enabled by Common Area Access Profile Assignment, the credential selected when making a key must be associated with a common area access profile that includes the common area.
• Unlimited Staff Common Areas—Access is enabled by default.
• Limited Staff Common Areas—Access is enabled by Common Area Access Profile Assignment. The credential selected when making a key must be associated with a common area access profile that includes the common area.

Common areas where access is enabled by default or by credential assignment are not listed in the Summary section when making a key. However, the floor access listed in the Summary section lists the floors where these access points are located.

Scheduling

The scheduling feature provides another layer of access control. Both of the following schedule types are programed directly in the locks:

• Auto-Unlatch Schedules establish when an access point can be accessed without a key thereby allowing unrestricted access. The access point types that support auto-unlatch schedules are restricted areas, meeting rooms, all common areas, and elevator readers.
• Access Schedules establish when an access point can be accessed with a valid key. You can assign a different Access Schedule for each credential class in which an access point is included. For example, if the Laundry Room common area is included in a Master credential and a Grand Master credential, you can assign different Access Schedules for each. The access point types that support access schedules are all common areas and elevator readers.