Access Rules

Access Rules define who can pass doors at this facility — by person type, by tag — and during what hours. They are facility-wide defaults: Access Scopes can override them for a subset of doors, and individual doors can override them further. Configure them under Settings → Access Rules.

A user can pass a door if either a rule on this page matches or they have a per-user grant (set in User Access). Both honour the access hours configured here. See How access decisions work for the complete decision flow.

Who can access

Who can access card

Figure 1: Person-type rules and tag-based access

A person is granted access if any person-type rule matches or any tag matches.

By person type

Each rule has the form: If <person type> and status is <one or more membership statuses>.

Click Add rule.
Pick the person type (e.g. Member, Staff, Prospect). Types appear automatically once people are synced from an integration or added manually.
Pick the membership statuses that qualify (e.g. Active, Current). Leaving the status list empty means Any status — anyone of that type passes regardless of status.
Remove a rule with the Remove rule (×) button.

New rules default to the first unused person type with statuses Active and/or Current pre-selected when those exist in your data.

Common statuses are shown with friendly labels: Active, Current, Expired, On hold, Cancelled, Pending (other values from your source system appear title-cased).

By tags

Select tags in the By tags field — "People carrying any of these tags can access doors at this facility." A user matches if any one of their tags is selected. Both kinds of tag count:

Synced tags — come from your integration and are refreshed on every sync
Custom tags — set by admins on the user's panel and never overwritten

Tags are a convenient way to grant access to ad-hoc groups (e.g. tag staff staff in your member system and add one tag rule here) without per-user grants.

Operating hours

Operating hours editor

Figure 2: The Operating hours editor

The Operating hours toggle restricts when the rules above allow access:

Off — access is allowed at any time of day (Always allowed).
On — add one or more time blocks per weekday. Outside every block, unlock attempts by rule-matched users are denied (reason: outside access hours).

Working with the editor:

Add time block adds a window to a day (default 06:00–22:00). A day can have multiple blocks (e.g. 06:00–10:00 and 16:00–22:00).
Copy hours to all days and Same as previous day speed up setup; the × clears a day (no access that day via rules).
All times are in the facility's local timezone.

Operating hours constrain the rule path only. Per-user grants have their own optional hours, and the per-door auto-unlock schedule (which physically holds a door open) is configured separately on each door — see Doors.

Override hierarchy

These settings are the facility defaults. More specific levels replace them for the doors they cover:

Facility rules (this page) apply to every door by default.
An Access Scope with Rules override on replaces them for the doors in that scope.
A door with Apply custom rules for this door replaces both for that door. A door can also be set to Block all access.

The most specific level wins. Details and examples: How access decisions work.

App Messaging Rules

The Access Rules page also hosts the App Messaging Rules card — automated dashboard messages keyed to membership status, person type, or tags (e.g. an "expired membership" notice). That feature is documented in App Messaging.

Saving

Changes on the Settings tab are not applied until you click Save changes in the save bar ("You have unsaved changes"). Discard reverts. Navigating away with unsaved changes prompts: "You have unsaved changes that will be lost if you leave this page." Saved rule changes take effect immediately on the next unlock attempt — no app update or door restart needed.