Property Management Access Control: Managing Employee and Tenant Access Changes

A manufacturing employee leaves the company on Friday. By Monday morning, their proximity card still opens the warehouse entrance.

Meanwhile, a tenant who moved out last month still has active credentials for the shared loading dock.

These are preventable access control problems, but they can happen when employee departures, tenant transitions, and credential management are handled by different people without a consistent process.

For managers of manufacturing buildings, warehouses, industrial parks, and multi-tenant commercial properties, property management access control involves more than issuing keys or proximity cards. It requires knowing who has access, which doors they can open, and when those permissions should change.

This guide explains how property managers can handle employee and tenant access changes efficiently, establish reliable security procedures, and select access control credentials that support daily operations.

Why Access Control Management Matters in Manufacturing Properties

Manufacturing and industrial facilities present unique security challenges.

Unlike traditional office buildings, these properties may contain expensive machinery, proprietary processes, raw materials, finished inventory, controlled equipment, and shared shipping areas.

A single facility might include:

• Multiple tenants operating in separate production spaces
• Employees working different shifts
• Shared loading docks and warehouse entrances
• Contractors performing temporary maintenance
• Restricted laboratories, tool rooms, or inventory areas
• Delivery personnel requiring limited access

The challenge is ensuring that each individual has the correct permissions without creating unnecessary security risks or disrupting operations.

The National Institute of Standards and Technology (NIST) emphasizes the principle of least privilege: individuals should receive only the access necessary to perform their assigned responsibilities.

For property managers, this means access permissions should reflect each person's current role—not their employment history or previous responsibilities.

Effective access management also requires prompt credential deactivation, accurate records, and periodic reviews.

Every employment change, lease modification, and contractor assignment should trigger an access control review.

Best practice: Assign responsibility for every access change. A documented request is only useful if someone is accountable for completing it and verifying the result.

Employee and Tenant Access Changes: Quick Reference

Event	Required Action	Recommended Timing
New employee	Assign approved doors and issue credentials	Before first shift
Employee promotion	Review and update access groups	On effective date
Employee transfer	Remove unnecessary permissions and add new access	On effective date
Employee termination	Disable credentials and recover access devices	At separation, coordinated with HR
New tenant	Establish tenant-specific access permissions	Before occupancy
Tenant expansion	Authorize access to newly leased areas	When authorized
Tenant downsizing	Remove permissions for surrendered areas	When access rights end
Tenant move-out	Deactivate tenant credentials and verify access removal	At authorized end of access
Temporary contractor	Issue limited-access credentials with expiration dates	Before work begins
Lost or stolen credential	Immediately disable credential and issue replacement	Upon notification

How to Manage Employee Access Changes

Employee access requirements typically change during three events: onboarding, internal transfers, and offboarding.

Each requires a defined procedure.

1. Establish Role-Based Access for New Employees

When a new employee joins a manufacturing facility, their access permissions should be determined before their first shift.

For example, a warehouse associate may require access to:

• Employee entrances
• Assigned warehouse areas
• Shipping and receiving
• Break rooms and common facilities

That employee probably does not need access to executive offices, research laboratories, network rooms, or restricted chemical storage.

Rather than programming individual doors for every new hire, facilities can use role-based access groups within their access control software.

A warehouse employee receives one set of permissions, while a maintenance technician or production supervisor receives another.

This approach improves consistency and reduces administrative errors.

Before issuing an access card or key fob, verify that the credential is compatible with the building's installed readers, credential technology, and system configuration.

2. Update Access When Employees Change Positions

Promotions and department transfers frequently create an overlooked access control problem known as privilege creep.

Consider an employee who transfers from shipping to quality control.

Their new role requires access to inspection rooms and testing areas. However, their previous shipping permissions remain active.

Over time, employees can accumulate access privileges that are no longer necessary.

To prevent this:

1. Review the employee's existing access permissions.
2. Identify doors and areas required by the new position.
3. Remove permissions no longer needed.
4. Assign the approved access group.
5. Record who authorized and completed the change.

For organizations with an HR department, establish a notification process that informs the access control administrator whenever an employee changes roles.

The objective is simple: access permissions should follow current job responsibilities.

3. Immediately Address Access When Employees Leave

Employee departures represent one of the most important access control events.

Whether someone resigns, retires, or is terminated, their credentials must be deactivated promptly according to the organization's security procedures.

NIST SP 800-53 includes personnel termination controls addressing the revocation of credentials, removal of access, and recovery of relevant organizational property.

A practical employee offboarding checklist should include:

• Coordinate the access removal time with HR and security.
• Disable all assigned access cards, fobs, and mobile credentials.
• Collect physical badges, mechanical keys, and other access devices.
• Document missing or unreturned credentials.
• Remove access to parking areas, shared entrances, and restricted spaces.
• Notify appropriate security personnel when additional precautions are necessary.
• Verify that access permissions were successfully removed.

Do not wait for an employee to return a card before deactivating it.

An unreturned credential should remain disabled, and any associated mechanical keys or other access methods should be addressed separately.

How to Manage Tenant Access Changes in Multi-Tenant Industrial Buildings

Managing tenant access is more complicated because the property owner and tenant often share security responsibilities.

The property manager may control main entrances, parking gates, and loading docks, while tenants administer access to their own offices or manufacturing areas.

A clear division of responsibility helps prevent unauthorized access and administrative confusion.

Establish Tenant-Specific Access Groups

When a new tenant signs a lease, create an access group that reflects the spaces they are authorized to occupy.

Depending on the property, these permissions might include:

• Tenant-specific entrances
• Assigned warehouse or manufacturing bays
• Approved loading docks
• Shared parking facilities
• Common hallways and restrooms
• Authorized operating-hour schedules

Whenever possible, use separate access groups for individual tenants.

This makes it easier to modify permissions, review credential assignments, and remove access when the tenant moves out.

Property managers should also request written identification of the tenant representatives authorized to approve credential additions, replacements, and cancellations.

Requests from unauthorized personnel should be referred to the designated tenant contact.

Adjust Access When Tenants Expand or Downsize

Industrial tenants frequently change their occupied space.

A manufacturer may lease additional warehouse bays during a period of growth or surrender part of its facility when operations change.

Access control permissions should reflect those changes.

When a tenant expands, identify which new entrances and shared spaces must be added.

When a tenant downsizes, remove access to surrendered areas as soon as the tenant's authorization ends.

Coordinate changes with lease administration, property management, and the access control administrator to ensure everyone is working from the same effective date.

Use a Formal Tenant Move-Out Checklist

Tenant turnover requires more than collecting building keys.

A complete move-out process should identify and deactivate every credential associated with the departing tenant, including those issued to employees, contractors, and temporary personnel.

Tenant move-out checklist:

For properties that use mechanical keys, consider whether cylinders should be rekeyed based on the security risk and the number of unreturned keys.

Important: Deactivating electronic credentials does not automatically eliminate access through mechanical keys, shared codes, or other independent entry methods.

Managing Contractor, Vendor, and Temporary Worker Access

Manufacturing facilities frequently rely on contractors for equipment repair, construction, inspections, installation, and temporary staffing.

These individuals often need access for a limited period.

Unfortunately, temporary credentials can become long-term security vulnerabilities when nobody remembers to deactivate them.

A practical contractor access policy should include:

• A documented sponsor or approving manager
• Access only to the necessary areas
• Defined start and expiration dates
• Restrictions on entry times when appropriate
• Credential return or deactivation when the assignment ends

For example, a contractor repairing equipment in a manufacturing bay might need access to the service entrance and designated production area, but not to unrelated warehouse inventory or administrative offices.

Where supported, configure automatic credential expiration within the access control platform.

Choose Credentials That Are Easy to Identify and Manage

Contractor and temporary employee credentials can be easier to administer when their appearance or numbering distinguishes them from permanent employee cards.

Depending on the system, property managers may use:

• Proximity cards
• Key fobs
• Clamshell credentials
• Printable photo identification cards
• Color-coded badges and holders

ID Enhancements offers a range of access control credentials, including RapidPROX® proximity cards and key fobs, to help organizations maintain appropriate replacement and spare credential inventory.

The correct product depends on the facility's reader technology, format requirements, and operational needs.

Build a Written Access Control Policy for Your Property

Even sophisticated access control systems depend on consistent administrative procedures.

Without a written policy, different managers may handle the same situation differently.

A practical property access control policy should establish five essential elements.

1. Authorized Requestors

Identify who may request employee or tenant access changes.

Examples include HR representatives, department managers, designated tenant contacts, and approved property management personnel.

2. Approval Requirements

Specify who must approve new credentials, expanded access permissions, and exceptions.

Higher-security areas may require additional approval.

3. Change Deadlines

Set clear expectations for processing routine requests, urgent access removal, and lost credentials.

Terminations and reported credential compromises should receive immediate attention.

4. Credential Documentation

Maintain accurate records of issued cards, fobs, replacements, and returned credentials.

Each record should identify the credential, assigned user, relevant permissions, and current status.

5. Regular Access Audits

Schedule reviews of active credentials and permissions.

Quarterly reviews provide a reasonable starting point for many commercial properties, while higher-risk locations may justify monthly or more frequent reviews.

Ask department supervisors and authorized tenant contacts to verify that listed credential holders still require their assigned access.

Keep an audit trail of the review and any corrective actions.

How to Choose Access Cards for Manufacturing and Industrial Facilities

The right access credentials can simplify employee onboarding, tenant turnover, and replacement requests.

However, proximity cards and smart cards are not universally interchangeable.

Before ordering replacement credentials, verify the following requirements.

Credential Technology

Identify whether the existing readers support 125 kHz proximity technology, 13.56 MHz smart cards, or multiple technologies.

Common credential families include:

• HID Prox
• AWID proximity
• Indala proximity
• HID iCLASS
• HID Seos
• MIFARE DESFire
• Other proprietary or manufacturer-specific systems

A card that looks identical to an existing credential may use a completely different technology.

Format, Facility Code, and Card Number

Many legacy proximity systems use formats such as 26-bit H10301, but others require different bit lengths or proprietary encoding arrangements.

When ordering cards, confirm:

• Credential technology
• Supported card format
• Facility or site code, when applicable
• Required card numbering sequence
• Reader and access control system compatibility

Matching only the card's appearance or frequency is not sufficient.

Card Construction and Identification

Consider how credentials will be used.

Standard proximity cards work well for many everyday applications, while printable ISO-style credentials can support photo identification and personalized employee badges.

Key fobs offer a compact alternative for personnel who do not need photo IDs.

Clamshell cards may be suitable for environments where durability is an important consideration.

Security Requirements

Traditional 125 kHz proximity credentials remain in widespread use, but many legacy technologies lack modern protections against credential duplication.

Facilities with sensitive areas may benefit from more secure credentials, such as appropriately configured HID Seos or MIFARE DESFire solutions.

Upgrading requires evaluating the complete access control environment, including readers, credential configuration, security keys, and system compatibility.

The best solution is not necessarily the newest card. It is the credential technology that meets the facility's security requirements and operates correctly with its installed infrastructure.

Common Access Control Mistakes Property Managers Should Avoid

Even experienced facility teams can overlook routine credential-management tasks.

Leaving former employee credentials active. Access should be removed when employment authorization ends, whether or not the physical badge has been recovered.

Failing to remove previous permissions. Promotions and transfers should trigger a complete access review, not simply additional door assignments.

Issuing contractor credentials without expiration dates. Temporary access should have a documented end point and responsible sponsor.

Overlooking shared areas during tenant move-out. Former tenants may retain permissions to parking gates, lobby entrances, or loading docks unless these are reviewed separately.

Ordering incompatible replacement cards. A proximity card with the wrong format or technology may not work with the installed system.

Failing to maintain spare credentials. An adequate supply of properly configured cards and fobs helps avoid delays when new employees arrive or existing credentials need replacement.

Avoiding these common mistakes can reduce security exposure, administrative work, and operational disruption.

Frequently Asked Questions About Property Access Control

How quickly should a former employee's access be removed?

Access should be deactivated when the employee's authorization ends. For involuntary terminations, coordinate the deactivation with HR and security so credentials are disabled at the appropriate time during separation.

Can proximity cards be reused for new employees or tenants?

Many access control systems allow reusable credentials to be reassigned after prior access has been revoked and the old assignment has been properly cleared. Confirm that the credential is in good condition and that reassignment is permitted by the system and organizational policy.

What should a property manager do when an access card is not returned?

Immediately deactivate the credential, document it as unreturned, and issue a replacement when necessary. Review any additional entry methods that might remain active.

Who should authorize tenant access changes?

The property manager should accept requests from tenant representatives who have been formally designated as authorized contacts. Written requests help maintain an accurate audit trail.

How often should manufacturing facilities review access permissions?

Quarterly reviews are a practical starting point for many facilities. Higher-risk areas, frequent personnel turnover, or specific compliance requirements may call for more frequent reviews.

Are traditional proximity cards secure enough for industrial properties?

Legacy 125 kHz proximity cards may continue to serve general access needs, but many lack the stronger authentication and encryption features available in modern secure credential systems. Assess the sensitivity of each area before selecting an appropriate credential technology.

What information is needed to order replacement access cards?

Depending on the credential system, you may need the manufacturer, card technology, format, facility code, card number range, and information about the installed readers. Matching these details helps avoid incompatible replacement orders.

Access Control Cards and Credentials from ID Enhancements

Managing employee and tenant access changes becomes easier when facility teams maintain accurate credential records, follow consistent security procedures, and have compatible replacement cards available.

For more than 30 years, ID Enhancements, Inc. has supplied access control credentials and identification products to businesses, security professionals, and organizations throughout the United States.

Our selection includes:

• RapidPROX® proximity cards and key fobs — USA-produced options with fast production turnaround.
• HID proximity credentials — Genuine HID card and fob options for compatible access control systems.
• Smart cards and secure credentials — Technologies including iCLASS, Seos, and MIFARE DESFire.
• Printable identification cards — Credentials suitable for employee photo identification where supported.
• Badge holders, clips, and accessories — Products that help organizations manage and display employee credentials.

Whether you manage a single manufacturing facility or a portfolio of multi-tenant industrial properties, selecting the correct credential is an important part of maintaining efficient operations and consistent building security.

Need replacement access cards, additional credentials, or help identifying a compatible format?

Visit ID Enhancements to explore our access control product selection and find credentials suited to your existing system.