Guide resource
Access Control Glossary explains a decision that can materially affect security, safety and administration. Use it to prepare for a site assessment, then have the final design checked against the building, door and operational requirements.

The practical distinction
Access Control Glossary matters because access control combines identity, authorisation and physical door operation. A credential identifies or helps authenticate a user; a reader collects it; a controller applies rules; and the lock follows an output. Door monitoring reports state but does not itself lock the opening.
Access-control terms from A to Z
- Access level
- A reusable set of permitted doors and times assigned to a person or role.
- Anti-passback
- A rule intended to prevent repeated entry without a corresponding exit event. It requires careful exception and emergency planning.
- Authentication
- Checking evidence that a person or credential is what it claims to be.
- Authorisation
- The decision that an authenticated user may perform an action, such as opening a particular door at a particular time.
- Controller
- The device that applies access rules, monitors inputs and operates lock outputs. It is distinct from the reader and management software.
- Credential
- Something presented or used to identify or authenticate a user, such as a PIN, card, fob, mobile credential or biometric factor.
- Door contact
- A sensor reporting whether the door is physically open or closed. It does not lock the door.
- Door forced open
- An event generated when a monitored door opens without an expected authorised release or exit sequence.
- Door held open
- An event generated when an opened door has not returned to its monitored closed state within the configured time.
- Fail safe
- A lock state that releases when electrical power is removed. The term alone does not establish compliance or suitability.
- Fail secure
- A lock state that remains secure from the entry side when electrical power is removed. Required egress may still be mechanically available.
- Identification
- Claiming or determining an identity. Identification is not the same as proving that identity.
- Interlock or security vestibule
- A controlled sequence involving two or more doors, requiring specialist safety and operational design.
- Mobile credential
- A digital credential enrolled to a supported mobile device and presented to a compatible reader. It is not the same as remote unlock.
- Reader
- The device that receives credential information and passes it to a controller or local decision process.
- Request to exit
- An input indicating that a person intends to leave. It may come from a button, sensor or approved exit device.
- Role-based access
- Permissions assigned through job or operational roles rather than accumulated person-by-person exceptions.
- Tailgating
- An additional person following an authorised user through an opening without a separate authorised transaction.
- Two-factor authentication
- Use of two different factor categories, such as a card and a PIN, to increase assurance.
Terms that should not be used interchangeably
- A credential is not a reader.
- A reader is not necessarily the controller.
- Access granted is not proof the door opened or closed.
- Door monitoring is not door locking.
- A mobile credential is not remote door release.
- Intercom release is not permanent user enrolment.
- Access events are not automatically time-and-attendance records.
- Alarm integration is not simply using the same card on two unrelated systems.
Access Control Glossary questions
What decision should the access control glossary guide support?
For Access Control Glossary, use it to record the relevant door, user, administration and failure requirements before equipment is selected. It is a planning aid, not a universal compliance certificate.
Does the access control glossary guidance apply to every opening?
For Access Control Glossary, no. Door construction, traffic, egress, fire significance, accessibility, environment and other building systems can change the appropriate design.
What site information is needed for access control glossary?
For Access Control Glossary, provide numbered doors, photographs or plans, user groups, operating hours, credential preferences, interfaces, known building constraints and expected changes.
Who should review a decision based on access control glossary?
For Access Control Glossary, the client and security designer should review it, with IT, building, fire, electrical, privacy or specialist contractors involved where their responsibilities are affected.
What should be tested after applying access control glossary?
For Access Control Glossary, test authorised and denied use, normal exit, physical closure, monitoring, relevant power or communications conditions and any integration from original event to operator outcome.
Discuss your access-control requirements
Share the door locations, approximate user numbers, site plans or photos, integrations and expected growth. Serious Security can prepare an itemised proposal after the requirements and site conditions are assessed.
Request an itemised access-control quote Sydney: (02) 8734 3250 Melbourne: (03) 8513 0799


