Skip to main content

Restrictions

To have more control over how and when users can access places, Kisi offers configurable restrictions by:

  • Location: Geofence restrictions
  • Device: Kisi Reader and Primary device restrictions, Allow App Access
  • Time: Time restrictions

Some restrictions can be applied to both groups and doors, some of them only to groups.

Geofence restrictions

The geofence restriction ensures that users must be in the vicinity of the building in order to open a door. Geofencing uses the GPS location of the user's mobile phone to determine proximity to a door based on the place's geographic location. With Kisi, the default allowed distance is within 300 meters (~0.2 miles) from the door.

Geofence restrictions can be applied to groups and doors as well. Use the tabs below to learn more.

If the geofence restriction is applied to a group, all users in this group must be within a distance of maximum 300 meters (~0.2 miles) from the building in order to unlock doors.

[Use case example] Geofencing for remote employees: If you have remote employees, you can create a group for them and apply geofencing on that group. Thus, you can avoid that they accidentally unlock the door from their home.

note

While Bluetooth and NFC based unlocks by tapping the phone at the reader satisfy both geofence (300 meters ~ 0.2 miles radius) and reader restrictions, we recommend keeping location services turned on as they may in some cases significantly improve the performance of Tap to Unlock ("T2U"). For more information, please refer to our support article on how to enable location services.

Kisi Reader restriction

The Kisi Reader restriction feature ensures that users may only unlock when standing in front of a door. The accuracy is magnitudes higher than with a geofence restriction, but requires the door to be equipped with a Kisi Reader. The reader restriction uses the Bluetooth chip of the mobile phone (and the reader) to know if the user is next to the door. The allowed distance is within approximately 5 meters (or 16.4 ft) from the reader.

When enabled, the user needs to be within range of a Kisi Reader to unlock. Users will have to enable Kisi to access their device's location to ensure they gain proper access within the reader proximity.

The Kisi Reader restriction can be applied to groups and doors as well. Use the tabs below to learn more.

If the Kisi Reader restriction is applied to a specific group, all users in this group must use the Kisi Reader in order to unlock the door.

[Use case example]: same as for the geofence restriction, but it's even more accurate.

note

In case of an unlock error, please check if the user's location services are enabled, shared with Kisi, or that the user is within the allowed distance of 5 meters (or 16.4 ft) from the reader.

Time restrictions

Time restrictions allow you to set a specific time window for users to access your space. This is particularly useful for spaces that have strict hours, conference room bookings, or even weekend emergencies.

Time restrictions can be applied to groups and doors as well. Use the tabs below to learn more.

If the time restriction is applied to a specific group, all users in this group will be allowed to unlock doors only at specific times.

[Use case example] Time restriction for the cleaning staff: You can enforce strict hours for the cleaning staff to clean the office only at a specific time (e.g. 6 AM to 8 AM). If they attempt to unlock the door outside of those allowed time frames, they will be denied access.

info

We recommend that your restrictions do not overlap or become redundant. For example, if you set a time restriction on a door, there is no need to also set the same restriction on a group using that door.

Primary device restrictions

Every Kisi user has a primary device they use to access a space. The primary device restriction allows the user to perform unlocks from one specific device, be it a smartphone or tablet. For example, if an employee normally opens the office door with an iPhone, and then one day decides to log in to Kisi from a Samsung tablet, the unlock will be prohibited. This restriction allows all unlocks to be traced back to one device for a particular user, making audit trails easier to review for administrators and encouraging users to update their primary device when they get a new phone.

Primary device restrictions can be applied to groups only.

Allow App Access

If enabled, the user may access using Kisi's mobile and web apps. The user will be required to sign in to access. If not allowed, the user won't be able to use app access regardless of the settings in the user’s memberships below.

Can be applied to groups only.