DOOR OS scopes what each manager can do through two permission groups: Key Management Permissions and Device Management Permissions. Portfolio Managers receive the highest level of both by default. Property Managers receive whichever level a Portfolio Manager has assigned to their account.
This page is the lookup reference for what each permission level lets a manager do.
Key Management Permissions
| Permission | Create/edit/delete Keys | Give and revoke Keys | View access logs | Reports tab |
|---|---|---|---|---|
| Full Key Management (default for Portfolio Managers) | Yes | Yes | Yes (managed Keys' doors) | Yes |
| Limited Key Management | No | Yes | Yes (managed Keys' doors) | No |
| Specific Key Management | No | Yes (specific Keys only) | Yes (specific Keys' doors only) | Yes |
Key access vs Key management. Key management permissions control DOOR OS actions. Key access is whether the manager can unlock the door — to grant unlock, add the relevant Key to their account.
Access logs scope. A manager only sees logs for doors that appear in keys they manage. For example, if "Door 1" is not in any of your managed keys, you won't see logs for "Door 1" — even at Full Key Management level for that property.
Device Management Permissions
| Permission | View battery / firmware / sync state | Upgrade firmware | Perform Door Sync | Activate or deactivate devices |
|---|---|---|---|---|
| Default (Device Management granted) | Yes | Yes | Yes | No (toggle is off by default) |
| Device Management + Activate/Deactivate | Yes | Yes | Yes | Yes |
The Activate/Deactivate toggle is the only Device Management permission that is manually switched on or off per manager. Without it, a manager with Device Management permissions can still upgrade firmware, view battery levels, and run Door Syncs — they just cannot install or uninstall devices.
Smart Home devices and locks both require Activate/Deactivate to install. A property manager without this permission cannot pair new hardware.
How to grant or change permissions
- In DOOR OS, navigate to Manage Settings → Staff.
- Click the Property Managers tab. (Portfolio Managers receive Full Key Management automatically and don't need per-account configuration.)
- Select the manager.
- Click Edit.
- Adjust Key Management Permissions and Device Management Permissions sections, then save.
How to add Device Management for a specific property
In the manager's contact card, in the Device Management section:
- Click Add Property.
- Choose the property to grant device management for.
- The card shows the total number of devices the manager will gain permissions over. Confirm the count is what you expect, then save.
Related articles
- Portfolio Manager vs Property Manager — what's the difference?
- Adding, editing, or deleting property and portfolio managers