A credential lifecycle defines how a person gains, changes, and loses physical access across the organization. Cards, fobs, and mobile credentials should follow one approved process even when different facilities use different hardware.
Part of Enterprise Access Control Systems.
Assign credential ownership
Identify the authoritative person record, the sponsor who approves access, and the administrators allowed to apply changes. Map onboarding, role transfers, temporary assignments, lost credentials, suspension, expiry, and departure. Separate the person from the credential: issuing a replacement card should not create a second unmanaged identity. Record which permissions are site-specific and which are justified across locations.
Handle transfers and delayed updates
Decide how access changes reach offline controllers and what staff do while synchronization is delayed. Temporary contractors need a defined end date and owner. A person moving to another location may require old permissions to be removed before new ones are added. Document emergency exceptions with approval and subsequent review rather than relying on shared permanent credentials.
Test enrollment through departure
Test enrollment, duplicate records, a replacement credential, transfer between sites, expiry, and termination. Confirm which administrator can perform each action and which record proves it occurred. Test the local behavior of an affected controller during communication loss, then check reconciliation after recovery. Keep the process and exception record with the access-control handover.
Related planning resources
- Managed Access Control Systems and System Health Monitoring
- Commercial & Industrial Access Control Systems
Let’s talk about your next step
Tell us what you want to improve and which locations are involved. We can help you work through the questions, check what your systems support, and define a practical project scope.