Access Rights

Access rights define the relationships between keys and locks. When a key has one or more access rights in common with a lock, the key can unlock the lock.

You can make your own work easier by dividing the access rights into two categories:

  • Access rights based on user groups. You can think of these access rights as groups of accessible areas such as "Master key facilities", "Maintenance facilities" and "Common facilities".

    • Users who share the same facilities typically have the same access rights to the facilities. Therefore, any change to the access rights applies to all users who have been granted the access rights.

  • Lock-specific, individual access rights such as "Apartment X”

    • In addition to the group-based access right, a user can be granted individual, lock-specific access rights.

    An example of the access rights of an apartment key:

    In addition to the "Common facilities" group access right, a typical apartment key includes an individual "Apartment X” access right. In this case, the users (inhabitants) of other apartments do not have access to the apartment in question, but all users have access to the doors of the shared facilities.

The access rights of an individual user are chiefly managed by means of access right groups. Lock-specific, individual access rights complement the access right groups and make access right management more flexible.

The following is a guideline for designing access rights:

  • Create access rights based on user groups, such as "Maintenance", "Subcontractor", "Cleaner", "Guard", or "Employee". Typically, these access rights are used for keys that are created specifically for these user groups. A typical exception to this recommendation is the "Master key" access right, which covers all locks.
  • An access right can cover one or more locks. For example, the "Maintenance" access right can cover the main entrance lock and machine room locks.
  • A lock can contain one or more access rights. For example, machine room locks can include the access rights "Master key" and "Maintenance".
  • A key can have one or more access rights. For example, a maintenance key can include maintenance and employee access rights.

An access right can be set to be either visible or hidden by default in iLOQ 5 Series Manager. For example, it can be sensible to hide seldom used access rights if the system contains hundreds of them. These may include lock-specific individual access rights that have been created in addition to the access rights based on user groups. If hundreds of seldom used, lock-specific access rights are left visible, it can be difficult to browse and find the more commonly used access rights in iLOQ 5 Series Manager. In such cases, it makes sense to hide lock-specific access rights by default. This makes the system more user-friendly.

In addition to standard access rights, the system has API access rights, which enable the use of an Application Programming Interface (API) in system integrations for the management of key access rights.

Both standard and API access rights can be restricted. Restricted access rights can be used on locks that are controlled with external potential-free output data, such as a relay or switch. When the outputs are closed, the access right is enabled. When the outputs are open, the access right is disabled. Restrictions can be applied to normal and API access rights.

A typical example of the use of restricted access rights is an apartment building where maintenance personnel needs access to individual apartments from time to time. If apartment doors are equipped with an ON/OFF switch, the inhabitants can control maintenance personnel access to their apartment. When the ON/OFF switch is set to ON, maintenance personnel can access the apartment, and when OFF, they cannot. Note that only lock cylinders that support external input are compatible with restricted access rights.