DOOR OS uses two manager roles: Portfolio Manager and Property Manager. Portfolio Managers have full administrative power across every property in their portfolio, including the ability to add or remove other managers. Property Managers have a narrower scope — their permissions for keys and devices are configured per account by a Portfolio Manager.
This article explains what each role can do, when to assign each one, and how key and device management permissions modify what a Property Manager actually sees.
What's a Portfolio Manager?
Portfolio Managers have the highest level of permissions in DOOR. They can:
- Invite and revoke residents and managers across every property in the portfolio.
- Create, edit, and delete any Key, Door, or schedule.
- Use the DOOR App for installation and maintenance on any device.
- Create and remove other Portfolio Managers and Property Managers.
Because Portfolio Managers can grant manager access to others, this role should be limited to a small number of trusted staff members.
What's a Property Manager?
A Property Manager's responsibilities depend on the Key Management Permissions and Device Management Permissions assigned to their account by a Portfolio Manager. They can be set up with broad access (close to a Portfolio Manager's permissions) or narrow access (limited to specific keys at a specific property).
Key differences from Portfolio Managers:
- They cannot create or delete other managers.
- They see every property where they're assigned as a Property Manager — but only those properties.
- Their key and device permissions are configurable per account.
What's the difference in permissions?
| Action | Portfolio Manager | Property Manager (Full Key) | Property Manager (Limited Key) | Property Manager (Specific Key) |
|---|---|---|---|---|
| Invite/revoke residents | Yes | Yes | Give and revoke only | Give and revoke specific keys only |
| Create, edit, delete Keys | Yes | Yes | No | No |
| Add/remove other managers | Yes | No | No | No |
| View access logs | All doors | All doors in managed Keys | All doors in managed Keys | Only doors in specific assigned Keys |
| Scan packages and assign to units | Yes | Yes | No | Yes |
| Access the Reports tab | Yes | Yes | No | Yes |
| Activate/deactivate devices | Yes (default) | Only if Activate/Deactivate permission is on | Only if Activate/Deactivate permission is on | Only if Activate/Deactivate permission is on |
| Upgrade firmware, view battery, perform Door Sync | Yes (default) | Yes if Device Management is granted | Yes if Device Management is granted | Yes if Device Management is granted |
Note on access logs: A manager only sees logs for doors that are in the keys they manage. If none of your managed keys include "Door 1," you won't see logs for "Door 1" — even at the Full Key level for that property.
Note on Key access vs Key management: Key management permissions control what a manager can do in DOOR OS. Key access is whether the manager can physically unlock that door — to grant unlock access, add the relevant Key to their account.
To configure permissions, navigate to Manage Settings → Staff in DOOR OS, choose the Property Managers tab, select the manager, and click Edit. For step-by-step instructions on adding or removing managers, see Adding, editing, or deleting property and portfolio managers.
Related articles
- Adding, editing, or deleting property and portfolio managers
- Key and device management permissions by role