How access works
Start with the site, then decide who, which doors, and when. Seamless keeps these decisions separate from device configuration.
| Item | What it controls | Example |
|---|---|---|
| Organization | Shared directory, sites, and organization administration | BrightWorks |
| Site | A set of doors, members, and local settings | Downtown office |
| User group | A collection of people at a site | Design Agency |
| Access grant | Doors and a schedule, shared with user groups | Office and lobby, weekdays 9–6 |
| Credential | How a person identifies themselves at a door | Mobile key, wallet pass, or card |
| Device policy | Lock behavior and accepted credential technologies | Auto-relock with Standard behavior |
Give a team access
- Add the people to the site.
- Put them in a user group.
- Create an access grant, select its doors, and set its schedule.
- Share the grant with that user group.
- Make sure each person has a credential the locks accept.
A user group alone does not define a door schedule. A credential alone does not grant access. A person may receive access through more than one group and grant; removing one route does not remove another.
Management roles and door access
Org Owners, Site Managers, and Configurers have different management responsibilities. Membership, management permissions, and the access shown for a door are distinct. Do not use a role change as a substitute for reviewing a person's door access.
Site Managers and Org Owners are placed in the protected default admin group automatically. Its linked All Access grant gives them 24/7 access to the site's doors; this membership and schedule cannot be edited like a custom group or grant.
Other default groups and the default device policy also have protected controls. Review the access shown for the person and site rather than assuming an empty custom-group list means no access.
Schedules and time zones
Set the site's time zone before creating schedules. Check the time-zone label when reviewing an access window or log, especially if you manage sites in different regions.
An access schedule determines when a person can open a door. A device-policy schedule determines the lock's behavior at that time. Changing one does not edit the other.
Coming from the earlier Groups model
Older documentation combined members, locks, and schedules under Groups. The current dashboard uses User Groups for people and Access Grants for doors and schedules. Existing migrated groups have corresponding user groups and access grants; review those before creating replacements.