Office Building Access Control: Lobby, Tenants and After-Hours

Office building access control means fitting card readers to key doors such as the lobby, car park and floor entrances, setting up each tenant or unit as a group with its own doors and hours, and logging every pass in one piece of software. The result is a building that runs smoothly during office hours and opens only for authorised people after hours.

The manager of a multi-storey office building faces the same questions every day: why do so many people have a lobby key? Who went into the car park on Friday night? Does the third-floor tenant who moved out still have cards? How does the night guard know who is allowed in? Building access control exists to answer exactly these questions. This article walks through the design, from choosing doors to onboarding a new tenant. The examples are hypothetical, and the practical details for each building should be checked with your installer.

What problems does an office access control system solve?

In older office buildings, security usually rests on three things: keys that have been copied without any record, the guard’s memory, and a handwritten visitor book. None of them scales. With a card system, each person has their own credential, and instead of one shared key the building has hundreds of separate, controllable permissions. When a tenant moves or an employee loses a card, only those permissions change, and nobody has to pay for new locks.

The second benefit is transparency. The building board or managing company can decide based on pass history instead of guesswork, for example whether the car park really needs to stay open until midnight.

Which doors need a door card reader?

Not every door has to go on cards. Start with the doors that mark the boundary between public and private space. The table below is a hypothetical pattern for an eight-storey building:

For emergency exits, fire and safety regulations override any design: access control must never block an evacuation route. The number of doors you put on cards directly affects the hardware cost and the software edition you need; read access control system price factors for the details.

One group per tenant: a simple model for multi-tenant buildings

The key to easy management is grouping. Create one group per tenant and set their permitted doors and working hours once, on the group. The tenant’s staff simply become members. A few shared groups are usually needed too:

• Building management: access to all common doors, no time limits.
• Cleaning and services: access to common areas at set morning and evening times.
• Maintenance: access to plant and technical rooms, around the clock.
• Couriers and deliveries: lobby only, during office hours, if a permanent card is needed at all.

With this model, if a tenant changes its working hours, you change one rule, not dozens of cards.

After-hours access rules and public holidays

An office building’s biggest risk is the hours when nobody is around. A sensible design: during office hours on working days, every employee’s card works at the lobby and on their own floor; after that, only groups explicitly allowed (such as managers or some companies’ shift teams) can get in; and on public holidays, access is kept to a minimum. For details on designing time windows and holidays, see access control schedules and card groups.

If a tenant occasionally needs to work at night, create a small “overtime” group of named people rather than opening up access for their whole group.

The lobby guard’s role in building access control

A card reader doesn’t replace the guard; it makes their work more precise. On the live monitoring screen, the lobby guard sees whether each pass was allowed or denied, and an audible alert flags unauthorised attempts. For a visitor without a card, after checking with the host company, the door can be released manually from the software; the lobby guard can do that in the operator role, just as the manager can.

It matters that the guard has an “operator” role, not a “manager” role: they see passes and can release a door manually from the software, but can’t create cards or change rules. That separation prevents accidental mistakes and keeps responsibilities clear.

Onboarding a new tenant and offboarding the previous one

Tenants change often in office buildings, and that is where most “forgotten” cards come from. A standard procedure:

1. Once the lease is signed, create a group for the new tenant with the agreed doors and hours.
2. Get a staff list from the tenant, then issue and register a card for each person.
3. Hand over cards against a signed receipt and have the tenant name one contact person for changes.
4. During the lease, take staff joiners and leavers from that contact and activate or deactivate cards accordingly.
5. When the tenant leaves, deactivate all of the group’s cards and collect them; keep the history for future reference.

Events, meetings and open entry mode

Sometimes the building hosts a conference, a small exhibition or a general meeting, and dozens of guests arrive without cards. Registering each one by name in the software for a few hours makes no sense. Instead, register a batch of event cards in the software beforehand and put one specific gate, such as the conference hall door, in “open entry” mode for the duration of the event; in that mode every card registered in the software opens it while unregistered cards don’t, so reception can simply hand guests those event cards. Every other door in the building stays controlled. Remember to switch the mode off and collect the cards afterwards.

Common mistakes when rolling out building access control

• Putting every door on cards from day one: it raises cost and complexity. Start with boundary doors and expand after a few months, based on real need.
• Shared cards for a company: when several people use one card, the pass history no longer means anything per person, and deactivating it locks them all out.
• No contact person at each tenant: if nobody is responsible for reporting staff joiners and leavers, leavers’ cards stay active for months.
• Giving the guard manager rights: it happens “to make life easier”, but it leaves every unintended rule change without an owner.
• Neglecting power and network for the software PC: a simple backup power supply for the computer and network equipment avoids many outage headaches.
• No written policy: put the rules on hours, visitors and lost cards on one page and give it to every tenant.

None of these mistakes is about technology; they’re all about management discipline. Without that discipline, even the best access control software just records the disorder.

Nooradio access control software for office buildings

Nooradio, P-Soft’s access control software, is built for office and residential buildings, complexes and car parks, and works only with smart cards and tags and the card readers at each gate. It is installed on one computer in the building; the manager defines people, cards, gates and rules, while the lobby operator has narrower permissions, monitors passes and can release a door manually from the software. Manual door release from the software is there for special cases. The interface is in Persian.

For a small office with one or two doors that doesn’t need groups or time rules, the Start plan (up to 2 gates) is enough. A multi-tenant building that needs a group per tenant, access hours, holidays, open entry for events and report export needs at least the Pro plan (up to 8 gates); larger towers with more gates need Elite. Nooradio is not a camera, plate-reading or attendance system. For a broader comparison of options, read the card access control buying guide.

Frequently Asked Questions

Which doors should office building access control start with?

The doors on the boundary between public and private space: lobby, car park and technical rooms. Suite doors can be added later.

How do I keep tenants’ access separate?

Create one group per tenant with its own doors and permitted hours, and make the tenant’s staff members of that group.

How does a visitor without a card get in?

Once the host company confirms, the door is released manually from the software. For events, one gate can be put in open entry mode temporarily so the event cards registered in the software beforehand open it.

What should we do when a tenant leaves?

Deactivate their cards and collect them. In Nooradio, deactivating doesn’t delete the history.

Which Nooradio plan suits an office building?

A small office with up to 2 doors fits Start; a multi-tenant building with groups and access hours needs at least Pro.

To review access control for your building’s lobby, car park and floors, request a Nooradio demo on the access control software page.

Further reading

• Vehicle Access Control Software: Card & Tag Guide and Use Cases
• Vehicle Access Control: LPR vs RFID vs Remote, Which to Choose?
• Benefits of Parking Management and Vehicle Access Control Software

Complete guide: access control system