Intro lesson

Door Access: Who, Where and When?

Understand the parts of an access system and turn a list of badge holders into clear, reviewable access rules.

Reviewed September 2026 · 3 minute read

Follow one access request

Direct link
  1. CredentialA badge, approved mobile credential or another supported identity method.
  2. Reader and controllerRead the credential and evaluate the configured access rule.
  3. Door hardwareActs on an authorized unlock request as designed.
  4. Door statusA position sensor reports open/closed state when installed and configured.

A grant event records permission; it does not prove the person entered, that the door latched, or that nobody followed. A request-to-exit input has a separate function from a position sensor.

Use roles and schedules

Direct link
Example door-access permission matrix
Practice roleApproved areaTime / lifecycle
Office staffStaff entrance and ordinary work areas.Approved work schedule; review when role changes.
Warehouse contractorAssigned work entrance and area.Agreed work window with an expiry.
Facilities administratorAuthorized configuration functions.Named account; administration and emergency procedures controlled.

Assign the minimum areas and schedules needed for the role. Plan visitors, lost credentials, holiday schedules and staff departures. Define who approves a change and who verifies it.

Entry security and safe exit are separate requirements

Direct link

A door system must preserve the required exit behavior. A fail-safe label generally describes a lock releasing when power is removed; fail-secure generally describes its secured side remaining locked. Neither label alone proves that the complete door permits safe egress.

Actual hardware, fire interfaces, accessibility, power-loss behavior and applicable approvals require project-specific review by qualified parties. This lesson covers concepts and planning; it is not a generic wiring recipe for an occupied exit.

A badge was disabled while the controller was offline

Direct link

List what you need to establish before declaring access removed: where permission is stored, how updates reach the controller, offline behavior and the available verification or containment procedure.

What is the key distinction?

A change saved in an application and a change applied at every relevant controller may occur at different times. Verify the actual design and resulting behavior.

Put it into practice

Check what you learned

Choose an answer for each question, then check your understanding. Your answers stay in this browser.

1. The log says “access granted.” What is not proved?
2. What should a contractor permission include?
3. Does “fail-secure” alone mean people cannot exit?

Read the answers and explanations
  1. That the person entered alone and the door secured afterward.

    An access decision is different from physical door and passage evidence.

  2. Approved area, schedule, owner and expiry.

    Bounded permissions are easier to explain and remove.

  3. No; assess the complete door and its independent egress hardware.

    The lock’s secured-side power behavior does not describe every egress function.

Sources and further reading
  • Ubiquiti: Access hub terminal functions

    Distinguishes lock outputs and sensor inputs on supported hubs. Follow the exact model instructions and approved door design for real work.

  • OSHA: exit-route door requirements

    Section 1910.36(d) addresses exit-door operation. It is one applicable reference, not a substitute for project-specific building, fire and accessibility review.

Keep your momentum

Ready for the next step?

If you can explain the example and your answer, try the next lesson. Revisit the feedback whenever you need it.

FryAVSI · Updated September 10, 2026

Reference this lesson or use a section’s direct link for a particular chart or example. How to cite an example.

FryAVSI · Northeast Ohio and beyond

Turn the learning into a working result.

Share the site, the requirement and the next step with our team.

Discuss a project