Planning who goes where and when

What access control actually does

A traditional lock answers one question: does this key fit? Access control answers more. It can ask who is presenting a credential, whether that person is allowed through this door right now, and it can record the answer. The credential might be a card, a fob, a keypad number, a phone or a fingerprint, depending on the system. The door hardware is then released electronically, usually by an electric strike, a magnetic lock or an electrified lockset.

The practical benefit for a business is control that does not depend on handing out metal keys. When an employee leaves, you disable one credential instead of rekeying every door. When a contractor needs entry for a week, you give them a temporary credential that expires. When something goes missing, you have a record of who entered the room.

Those benefits come with responsibilities. Someone must manage the system, add and remove users, review the records and keep the software and batteries current. A system that is installed and then ignored can be less secure than good mechanical locks, because people assume it is protecting them while old credentials still work. Planning begins by deciding who will own the system after the installer leaves.

Step one: list every door and what it protects

Walk the building with a notepad and list every door that people use or that could be used to enter. Include the front entrance, the rear door, loading doors, stairwell doors, office suites, storage rooms, server closets, cash rooms and any door to a roof or mechanical space. For each, write down what lies behind it and how serious it would be if the wrong person went through.

Group the doors into zones. A typical small business might have a public zone, a staff-only zone and a restricted zone for cash, records or equipment. The zones help you decide which doors need electronic control and which can stay on a simple key. Not every door needs a card reader. Putting readers on every interior door can cost more than it protects.

Note the type and condition of each door as well. Access control hardware depends on a door that closes properly, fits the frame and has solid hinges. An electric strike on a door that sags will fail to latch, and a magnetic lock on a door that does not meet its plate will not hold. A technician will check this during a site visit, and you can help by listing doors that stick, rattle or do not close on their own.

• Front, rear, side and loading entrances
• Interior doors to offices, stockrooms, cash rooms and server closets
• Stairwell, roof and mechanical doors
• Gates, parking entrances and elevator lobbies if you control them
• Doors that stick, sag or do not close fully on their own

Step two: list every person and group

Now list the people who need access, not by name but by role. Owners, managers, full-time staff, part-time staff, cleaners, delivery drivers, maintenance contractors, the landlord's representative and visitors are typical groups. For each role, decide which zones and doors they need and at which times.

A simple table helps. Put the roles down the side and the zones across the top, and mark the access level in each cell: none, daytime only, always. This becomes the backbone of the system configuration. It also exposes assumptions. You may find that the manager has always had the key to the cash room because nobody questioned it, and that a part-time worker has a master key because it was easier.

Think about how roles change. A cleaner who comes at night needs different hours than a manager. A seasonal worker needs access that ends on a date. A person on leave may need access suspended without being removed. Good systems handle these cases through schedules and groups, but only if you describe them in advance. Our page on key control for property owners shows how to think about this even before electronics are involved.

Step three: decide on schedules and exceptions

Schedules say when a group may enter. A common pattern is access during business hours for staff, wider hours for managers and limited windows for cleaners and vendors. Holidays and unusual hours need thought. If your business operates seasonally, or closes on certain days, build those into the schedule so credentials do not work when the building should be empty.

Decide what happens when someone needs to enter outside their schedule. Some systems allow a manager to grant a one-time pass. Others require an administrator to change the schedule. Either way, there should be a defined process, not an informal workaround such as lending a card. Lending credentials defeats the point of individual records.

Plan for the day the system is not working. Power fails, networks drop and software needs updates. A system should have a documented fallback, such as a mechanical key kept in a secure place or a manual override on a key door, so that staff are not locked out of their own workplace. At the same time, that fallback must itself be controlled, or it becomes the weak point.

Step four: choose a credential type that fits your people

Credentials come in several forms, each with advantages and limits. Cards and fobs are common, simple and inexpensive to replace, but they can be lost, lent or copied if the technology is old. Keypads need no physical credential, but numbers can be shared or observed. Mobile credentials use a phone and can be issued and revoked remotely, but they depend on staff having compatible devices and charging them. Biometric readers, such as fingerprint readers, tie access to the person, but they raise privacy and reliability questions and may not suit every workplace.

Some businesses combine two methods for sensitive doors, such as a card plus a number. That reduces the risk of a lost card being used. It also slows people down, so use it where the risk justifies the friction.

Ask what happens when a credential is lost. In a good system you can disable one credential immediately and issue a new one without disturbing anyone else. Ask also whether the credential technology is current and whether blank cards are widely available. Older formats can be copied by inexpensive devices, which is a reason to choose a modern, encrypted format. A technician can explain which formats a particular reader supports.

Hardware choices at the door

The reader is only one part. The door also needs hardware that releases when the reader approves entry. The common choices are electric strikes, magnetic locks and electrified locksets, and each fits certain doors. Our pages on electric strike installation and magnetic lock fire safety basics explain the differences in more detail.

Whatever the hardware, the exit path matters. People must always be able to leave. Doors on an exit route must allow people to leave without prior knowledge, tools or effort, and in many buildings the local fire authority has specific requirements. Never design an access system that traps people inside. Ask the installer how the system meets egress requirements and whether the plan has been or will be reviewed by the building authority where required.

Power matters too. Decide what a door does when power fails. A fail-safe door unlocks when power is lost, which favors exit and safety, while a fail-secure door stays locked, which favors security but needs a way to leave. Many doors are fail-secure with a mechanical exit. The right choice depends on the door's role and the rules for your building. This is a decision to make with the installer and, where relevant, your landlord.

Software, records and who is responsible

Behind the readers is software, either a local program, a hosted service or a mix. Ask where the data lives, who can see it and how long records are kept. Ask whether you can export the list of users and records if you ever change provider. A system that locks you in is a long-term risk, and one that stores data you cannot reach is a poor foundation.

Assign an administrator and a backup. This person adds and removes users, reviews alerts and keeps the system updated. They should be someone who stays with the business and who understands the role. A system managed by a departed consultant can become a problem within months.

Consider privacy. Records of who entered where, and when, are information about people. Tell staff that records exist and what they are used for, and limit who can read them. In some workplaces there are legal expectations around employee monitoring, so it is sensible to check with your own advisers about notice and use of the records.

Questions to ask before you sign anything

When you talk to a vendor or technician, prepared questions help you compare proposals and avoid surprises. Ask what the system includes and what it does not, such as software licenses, cards, cabling and ongoing support. Ask what the process is when a credential is lost, when the power fails and when the network is down. Ask who is responsible if the door fails to latch.

Pricing for access control is provided by phone and, for anything beyond a simple single door, only after an on-site look. A service call charge applies to the visit and is explained on the phone before dispatch. Be cautious of anyone who quotes a firm price for a complex system without seeing the doors. Our guide on service call charges and quotes explained describes what is reasonable.

Also ask what the existing locks will do afterward. Some businesses keep mechanical keys as a backup, in which case the key system still needs good control. If you are also considering restricted keys or a master key arrangement, read about master key systems for business so the two systems are planned together.

Three example businesses and how their plans differ

A small medical or dental office has a public waiting room, treatment rooms, a records area and a supply closet. Its plan might leave the front door on a normal key or a timed lock during business hours, put a reader on the records room and the medication or supply closet, and give each staff member an individual credential. The records are the reason: the office needs to show who entered the room where patient files are kept, and the schedule can restrict that room to working hours.

A small retail shop with a stockroom and an office has different priorities. The customer door stays simple, the stockroom door gets a reader so that sales staff cannot wander in with a bag, and the office with the safe gets the tightest rule. Part-time workers receive credentials that work only on their shifts. The owner can see on a Monday morning that a back door was used on Sunday evening and ask why.

A shared office suite in a larger building has the landlord's lobby system plus its own door. The tenant may add a reader to the suite entrance, but it must coordinate with the building on egress, power and keys, and the landlord may need a way in for emergencies. The plan therefore includes a conversation with the property manager before anything is bought. In each example the order is the same: doors, people, schedules, then equipment.

Notice what these plans share. They begin with the question of what is being protected, they give people the least access that lets them work, and they define who manages the system. None of them starts with a product. If a vendor begins by showing you a device before asking about your doors and people, slow down and bring the conversation back to your list.

Phasing the project and testing it

You do not have to do everything at once. Many businesses start with the most important door, such as the main entrance or a cash room, and add more later. Phasing spreads the cost and the learning. It also lets you see how staff respond before committing the whole building. Choose a system that can grow so that early work is not wasted.

Before the system goes live, test it with real scenarios. Try a credential that should work and one that should not. Try the door during and outside scheduled hours. Cut the power to see what happens. Try leaving from the inside as a person who has never used the door. Write down the results and fix the problems before relying on the system.

After installation, train the staff briefly and put a one-page guide in the office. Review users every quarter and remove anyone who no longer needs access. If you want help thinking through a plan or understanding what an on-site visit would involve, call and describe the building, the doors and the number of people, and a dispatcher can explain the next step.

Questions people ask

Related pages

Written by Claude (AI) (AI) for 24 Hour Locksmith Miami.