UniFi Access - Manage Users, Groups, & Visitors

Highlights

• Admins can create users, view their access activities, and assign them access credentials, user groups, and policies.
• Admins can create user groups and assign access policies to these groups, which simplifies permission management for multiple users.
• Admins can create visitors, schedule visits, and grant access to specific locations during designated times.

Learn more about admin roles and permissions

Notes:

• If UniFi Identity Enterprise is activated, users and groups are managed in Identity Enterprise Manager > Organizations > Members, but access policies can still be managed in Access.

Manage Users

Create New User

1. Go to your Access application > Settings > Admins & Users > Users > Create New User and click Create New User.
2. Enter the user's name and email.
3. Configure the following:
   
   • Groups: Assign the user to specific groups to give them the permissions granted to those groups.
   • Assignments: Assign Access and other permissions to the user. 
     • Access Policies: Assign to grant access to specific locations during designated times. See this article to learn more 
     • Credentials: Assign to allow location unlocks using the assigned credentials. See this article to learn more
4. Click Create.
   
5. Send a UniFi Identity invitation to the user through email or a URL. 
   

Import Users from a CSV File

1. Go to your Access application > Settings > Admins & Users > Users > Create New User and click Import Users from CSV File.
2. Upload a CSV file according to the specified format. The file cannot exceed 10 MB, must be UTF-8 encoded, and is limited to 1,000 users.
3. Select whether to Import Users to a Specific Group.
4. Click Import.
   

Send Identity Invitation to User

This helps the user download and set up UniFi Identity Endpoint for mobile and desktop, and access all the powerful features at their fingertips.

1. Go to your Access application > Settings > Admins & Users > Users.
2. Select a user, go to Overview, and do either of the following:
   • If an Identity invitation was not sent before, click Send.
   • If an Identity invitation was sent but has expired, click Invite Again.
   

Upgrade to Admin Role

1. Go to your Access application > Settings > Admins & Users > Users.
2. Select a user, go to Settings, and click Upgrade to Admin.
3. Assign admin permissions and click Upgrade.
   

Deactivate and Remove User

Notes:

• Deactivated users will still be displayed in the user list but cannot access locations unless activated.
• Only users with Active status can access designated locations with authorized credentials.
• Only deactivated users can be removed.
• Your admin role must have higher-level permissions than the user's to activate, deactivate, or remove a user.

1. Go to your Access application > Settings > Admins & Users > Users. 
2. Select a user, click Deactivate, and confirm you want to proceed. 
3. Once deactivated, you can do either of the following:
   • Activate the user.
   • Remove the user from the Access application.

Manage Groups

Create New Group

1. Go to your Access application > Settings > Admins & Users > Users > Manage Groups and click Create New.
2. Enter the group name.
3. Configure the following:
   • Users: Select the users to assign to this group.  
   • Assignments: Assign Access and other permissions to the group. 
     • Access Policies: Assign to grant the group access to specific locations during designated times. See this article to learn more
4. Click Create.

Remove Users from Group

1. Go to the Access application > Settings > Admins & Users > Users > Manage Groups.
2. Select a group, go to Users, and click X beside a user to remove them from the group.
   

Remove Access Policies from Group

1. Go to your Access application > Settings > Admins & Users > Users > Manage Group.
2. Select a group, go to Assignments > Access > Access Policies, hover your mouse over a policy, and click the Trash icon. 

Send Identity Invitation to Users

This helps the group users download and set up UniFi Identity Endpoint for mobile and desktop, and access all the powerful features at their fingertips.

1. Go to your Access application > Settings > Admins & Users > Users > Manage Group.
2. Select a group and click Send Identity Invitation to Users. 
3. Select the users to send the invitation and click Send.
   

Remove Group

1. Go to your Access application > Settings > Admins & Users > Users > Manage Group.
2. Select a group and click Remove.

Manage Visitors

Schedule one-time or recurring visits and assign access credentials to visitors.

Notes:

• Once UniFi Identity Enterprise is activated, visitors can be added and managed in both the Access application and Identity Enterprise Manager.

Create New Visitor

1. Go to your Access application > Settings > Visitors > Create New Visitor.
2. Enter the visitor's name and other information.
3. Specify the following:
   • Visit Schedules:
     • One-Time Visit: Specify the visit date and time.
     • Recurring Visit: Specify the recurring visit time and dates.
       • Use a Predefined Schedule: Enable it to apply a previously added schedule. 
       • Holiday Exceptions: Enable it to grant access to locations during holidays. 
   • Visit Locations: Grant access to specific locations, location groups, and elevators. 
   • Credentials: Assign to allow location unlocks using the assigned credentials. See this article to learn more
4. Click Create.
   

View Visitor Status

Manage Visitor Status

1. Go to your Access application > Settings > Visitors.
2. Select a visitor, go to Settings, and click an option: 
   • Mark as Expected Arrival
   • Mark as Complete
   • Cancel Visit
   • Remove