Access Rights

Access rights are used to define the relationships between the keys and the locks. As a rule, if a key shares one or more access rights with a lock, the key can open the lock.

For your own convenience, divide the access rights into two categories:

• Access rights according to person groups. You can consider these as access right groups.
• Lock-specific, individual access rights.

The access rights of an individual person are mainly managed through access right groups. Lock-specific, individual access rights complement the access right groups, and provide flexibility to access right management.

The list below provides a planning guide for access rights:

• Create access rights according to person groups, such as "Maintenance", "Cleaner", "Guard", "Teacher" or "Employee". Usually, these access rights are used on keys that will be created to these person groups, respectively. A usual exception to this recommendation is the "Master access" access right, which covers all locks.
  Tip:

  There are locking systems where the number of access rights is large. An example of such locking system is a shopping mall with dozens of shops, each forming an access right of its own. In these cases, you can reduce the number of access rights on common area locks, which must allow access to everyone, by using an additional "Common areas" access right, given to all shop keys.

  In this way, you do not have to assign every shop's access right to the common area locks, but use the "Common areas" access right instead. In this solution, the shop keys consist of the shop-specific access right and the "Common areas" access right.

• An access right can contain one or several locks. For example, the access right for a teacher can cover the main entrance lock and the classroom locks.
• A lock can contain one or several access rights. For example, a classroom lock can contain the "Master access", "Maintenance", "Cleaner", and "Teacher" access rights.
• A key can contain one or several access rights. For example, a music teacher's key can contain the common "Teacher" access right and the additional "Music teacher" access right, that has access to the music class, instrument room and so on, which are blocked from the common "Teacher" access right.

An access right can be, by default, shown or not shown in iLOQ Manager. You can use the access right visibility setting to hide access rights that are rarely used, if your system contains hundreds of them. These can be, for example, lock-specific access rights created in addition to access rights based on person groups. If there were hundreds of rarely used, lock-specific access rights listed in the same view, it would be inconvenient to browse and find commonly used access rights in iLOQ Manager. In a case like this, it is a good idea to not show the lock-specific access rights, by default. This makes the system more usable.

There are two advanced access right types:

• Versional access rights.

  Versional access rights can be used for providing temporary access rights in, for example, hotels. When a customer inserts a key to the lock, the key and lock access right version numbers must match, or the key must have a higher access right version number than the lock has. Otherwise, the key cannot open the lock.

  When you add a versional access right to the system, it gets version number 1. When you add the versional access right to locks or keys, you select the same or higher access right version than the one already on the access right.

  In the hotel example, you would give a new customer a room key with an increased access right version number. When the customer inserts the key to the room lock, the lock access right version number is increased. The previous customers would not be able to open the door anymore, even if they had not returned their keys to the reception. Furthermore, the reception staff would not have to blacklist the unreturned keys to the room locks.

  Note:

  A key or a lock can only contain one versional access right, in addition to normal access rights.

• Conditional access rights.

  Conditional access rights can be used, when the locks are controlled by an external, potential-free contact information, such as a relay or a switch. When the contacts are closed, the access right is valid. When the contacts are open, the access right is invalid.

  You can use conditional access rights in, for example, a scenario where you have an apartment building, and the maintenance personnel need, occasionally, access to apartments. You can equip the apartment doors with ON/OFF switches, with which the resident can control the maintenance personnel access to the apartment. If the ON/OFF switch is in the ON position, the maintenance personnel are able to access the apartment, and vice versa.