How to have Complete Control Over Your Tenant System

If you need 100% control over who is granted access to your tenant system you have 2 options:

1. The Tenant system administrator adds the custodians and building engineers to the tenant system manually.

• Pro: Maintain 100% control of who has access to his tenant system.
• Con: Tenant system administrator would have to manually create these people and their access levels.
• Con: Tenant system administrator would have to be notified by the building manager(s) each time there is a new custodian or building engineer. Same if they are no longer an employee in the building or lost their card and a replacement card is provided.

2. The building manager(s) provides the scope over the occupant the custodians and building engineers belong to. 

• Pro: Maintains 100% control of who has access to his tenant system.
• Con: The Tenant system administrator would be giving scope over people that are not there to manage.
• Con: The Tenant system administrator would have to manually update the access for these people.
• Con: The Tenant system administrator would have to be notified by the building manager(s) each time there is a new custodian or building engineer.  Same if they are no longer an employee in the building.  

1. Delegate the tenant access points to the building manager(s). The building manager(s) could create the needed access levels for the custodians and the building engineers. The building managers would assign either the access level or the individual points to the custodians and building engineers. BluB0X would recommend creating access levels. This makes modifying access easier. The building does not have to update each person if they want to make a change to access.  Ex. Change the hours of access or portals they can access.

• Pro: The building manager could assign access for the custodians and building engineers, leaving tenant administrator to not be involved every time a new card is added or an employee is no longer working in the building.  When the building deletes the person they also lose access to the tenant system.
• Con: Tenant system administrators might not know who has been given access to the tenant space by the building manager unless they are explicitly told.
• Con: The building manager(s) could assign the access level or points to anyone in the building.  The tenant administrator might not be comfortable with this.

2. Tenant System Administrator creates Access Levels for custodians and building managers. Does not delegate the portals, Tenant system administrator would be the only person that could add a tenant system portal to the access level.

• Pro: Building manager(s) could assign access to the custodians and building engineers, leaving Tenant system administrator to not be involved every time a new card is added or an employee is no longer working in the building.  When the building deletes the person they also lose access to the tenant system.
• Pro: Slightly more control than using delegation, as only as the tenant system administrator can add a tenant system portal to a building's Access Level.
• Con: Tenant system administrator might not know who has been given access to his space by the building manager unless he is told.
• Con: Building manager(s) could assign the access level to anyone in the building. The tenant administrator might not be comfortable with this.