Configuring Access Manager roles

To monitor the units, keep them in sync with the access control settings in Security Center, and allow them to make access control decisions independently, you can configure an Access Manager to control the units.

To configure an Access Manager role:

1. From the Config Tool home page, open the Access control task, and click the Roles and units view.
2. Select the Access Manager role to configure, and click Resources.
3. If necessary, configure the database required to run this Access Manager.
   If you plan on setting up Access Manager failover, see Setting up role failover.
4. Click Properties and configure the general settings of the Access Manager.
   • Keep events:

     Specify how long you want to keep the events in the Access Manager database before deleting them. The access control event are used for reporting and maintenance purposes (they include events related to doors, elevators, areas, and other access control entities).

     • Indefinitely:

       Keep the events until you manually delete them.
     • For:

       Select the number of days for the retention period.

     CAUTION: If you are using the SQL Server 2014 Express database engine (included with the Security Center installation files), the database size is limited to 10 GB. A door event uses (on average) 200 bytes in the database. If you configure the Access Manager to keep door events indefinitely, the database eventually reaches the 10 GB limit and the engine stops.
   • Activate peer to peer:

     Select this option to enable the communication between Synergis™ units managed by this Access Manager. Up to 15 units can be connected as peers, supporting a maximum of 512 outputs and 128 inputs in I/O linking configurations.

     BEST PRACTICE: Only enable peer to peer communication if you plan to create I/O zones that involve multiple Synergis™ units, or apply antipassback to areas controlled by multiple Synergis™ units. Leave this option off for better system security and performance.
   • Activate global antipassback:

     Select this option if you need to apply antipassback to areas controlled by multiple Synergis™ units. To enable this option, you must first enable peer to peer.

     BEST PRACTICE: If all your antipassback areas are controlled by a single unit, do no enable global antipassback. Enabling global antipassback increases the communication between Synergis™ units.
   • Include identifiable personal data in synchronization:

     (Synergis™ units only) Select this option to sync cardholder names with the Synergis™ units. If this option is cleared (default), only credentials without personal data are synced. Enable this option when you have devices that can display cardholder names and you want them to appear.
5. If necessary, add the extensions for the access control unit types that you want this Access Manager to manage.
6. Add the access control units that you want this Access Manager to manage.