Access Scopes

An Access Scope is a named bundle of doors — for example Main entrances, Staff-only, or Vehicle access. Scopes make permissions manageable at scale: grant a user a whole scope in one tick, or give a set of doors its own rules, operating hours, or geofence without touching the facility defaults. Configure them under Settings → Access Scopes.

What Access Scopes do

Figure 1: The Access Scopes list

1. Easier grants — instead of ticking individual doors on a user, grant them a scope. The grant automatically covers doors added to the scope later.
2. Policy overrides — a scope can carry its own access-rules override and/or geofence override, replacing the facility defaults for just those doors.

Notes on how scopes behave:

• A door can belong to multiple scopes.
• Scopes are independent of the Door location label used to group the Doors list — a scope can mix doors from any locations.
• Deleting a scope doesn't affect the doors; per-user grants that referenced the scope simply stop applying.
• In the list, each scope shows its door count plus Rules override / Geofence override badges when overrides are set.

Creating a scope

1. Go to Settings → Access Scopes and click Add scope.
2. Optionally pick a template (below), or choose Custom to start blank.
3. Enter a Scope name (required) and optional Description.
4. Click Create scope, then open it to add doors.

If you have no scopes yet, the page shows a Get started with Access Scopes panel with the same templates plus a Build from scratch button.

Templates

Templates pre-fill the name and description, and two of them pre-set operating hours ("This template will also pre-set the scope's operating hours — edit them in the next step."):

The scope editor

Click a scope to open its editor. It has a name/description header, four tabs, and Done / Save scope buttons.

Overview tab

Figure 2: Scope overview with Doors / Rules / Geofence summary cards

Summary cards show the scope's door count and whether rule or geofence overrides are active; click a card to jump to that tab. The Danger zone holds Delete scope — confirmation warns: "Per-user grants that reference this scope will no longer apply. Doors are not affected."

Doors tab

Figure 3: Choosing which doors belong to the scope

Tick the facility doors that belong to this scope. Membership takes effect when you save.

Rules tab

Figure 4: The scope's rules override

Turn on Rules override to give this scope's doors their own rule set — the same editor as the facility's Access Rules: person-type rules, tags, and operating hours. While on, these rules replace the facility rules for the scope's doors (a per-door override still wins over the scope). Turn the toggle off to fall back to facility rules.

Geofence tab

Figure 5: The scope's geofence override

Turn on Geofence override to give the scope's doors their own geofence (pin, radius, accuracy settings) using the standard editor described in Geofencing. While on, it replaces the facility geofence for those doors (a per-door override still wins).

Granting users a scope

Open a user in User Access, scroll to Per-user grants, and tick the scope under Scope grants. The user can then unlock every door in the scope (subject to the geofence and any grant hours), even if no access rule matches them.

Worked example

A gym wants members through the front doors during staffed hours, staff through everything, and a 24/7 outdoor training area:

1. Scope Main entrances (template) containing the front doors — no overrides; facility rules (e.g. Member, status Current) apply.
2. Scope Staff-only containing office and back-of-house doors, with a Rules override matching the staff tag only.
3. Scope 24/7 access (template) containing the outdoor area gate, with its always-allowed hours override.

A member tagged staff passes all three; a regular member passes only the facility rules on the main entrances during operating hours.

Related pages

• How access decisions work — override precedence
• Access Rules
• Geofencing
• User Access — scope grants