To control access anywhere on your site, you must create access rules that apply to the
areas, doors, and elevators.
What you should know
As a best practice, use a descriptive name when creating access rules so you can easily
determine what each rule does. For example,
Lab Technicians Only or
All Employees
Regular Hours.
Procedure
-
From the Config Tool homepage, open the
Access control task, and click the Access
rules view.
-
Click Access rule (
).
-
Assign a name and description to the access rule.
-
From the Partition list, select the partition in which you want
to create the access rule, and click Next.
Members of the Administrators user group can click

to create a new partition.
-
Select the schedule for when you want your rule to be active. The default is
Always.
-
Select the type of rule that you want (Permanent or Temporary).
Permanent access rule is the default. A temporary access rule includes both an activation
time and an expiration time. The system automatically deletes temporary access rules
seven days after they expire to keep the system organized.
-
If you select Temporary, specify the following:
- Activation
-
Activation date and time, or when the rule
schedule starts to apply.
- Expiration
-
Expiration date and time, or when the rule
schedule stops to apply.
-
Click Next.
-
Review the Creation summary, and click
Create and then click Close.
-
Select the access rule that you created, and click
Properties.
-
Select whether to grant access or deny
access when the rule is active.
Best Practice: Usually schedules are used to grant access. Access is denied when
schedules are inactive. Use explicit deny schedules only for
exceptions.
-
Under the Cardholders affected by this rule section, click
Add an item (
), select the
cardholders or cardholder groups the access rule applies to, and then click
Add.
Best Practice: Create cardholder groups instead of individual cardholders, as this
becomes much more manageable in large systems as more people come and go.
-
Click Apply.
After you finish
Assign the access rule to secured areas, doors, and elevators so the access rule is
operational. You can do this from the
Relationships section of the access
rule's
Identity page or from the area, door, and elevator
entities.