GuideInformationAccess Control

Check how UniFi reader Admin Mode differs from normal two-step entry

Review local administrator credentials alongside two-step entry so the documented Admin Mode boundary stays visible.

Integrated video surveillance and controlled entry at a modern commercial facility.
DSE visual intelligencePhysical securityGuide · 2 min read
Executive summary

What you need to know

Review local administrator credentials alongside two-step entry so the documented Admin Mode boundary stays visible.

Potentially affected

Applies to supported UniFi Access two-step readers and their documented Admin Mode behavior. This is a boundary in the product’s workflow, not a claim that every administrative action has identical authorization.

DSE recommendation

DSE recommends reviewing local administrator credentials whenever a site adopts two-step entry.

Review local administrator credentials alongside two-step entry so the documented Admin Mode boundary stays visible.

Source facts

UniFi Access two-step entry can require two enabled methods or an additional designated approver within the configured time window. The guide separately states that this requirement applies to normal door-unlock workflows, not entry into Admin Mode on camera-equipped readers. Access admins can enter that mode with their assigned NFC card or PIN even when two-step entry is enabled. The feature also has specific application, console, hub, and reader firmware requirements rather than applying uniformly to every reader.

Source: Ubiquiti Help Center — Configuring Door Unlock Methods in UniFi Access.

Applicability

Applies to supported UniFi Access two-step readers and their documented Admin Mode behavior. This is a boundary in the product’s workflow, not a claim that every administrative action has identical authorization.

DSE recommendation

DSE recommends reviewing local administrator credentials whenever a site adopts two-step entry. Document who can enter reader Admin Mode and distinguish that authority from the ordinary user’s two-method requirement. Confirm the supported hardware and firmware set before rollout, and decide whether the goal is two credentials from one person or approval by another person. Include these choices in staff training so the word two-step is not treated as a universal description of all reader interactions.

Verification

On an approved reader, test an ordinary user’s configured entry sequence, an absent or late second step, and a designated administrator’s Admin Mode entry. Confirm the intended privilege boundaries without leaving an administrative session unattended. Record device versions and tested account types so results are not generalized to unsupported readers.

Official reference

Ubiquiti Help Center — Configuring Door Unlock Methods in UniFi Access. Reviewed October 15, 2026.

Primary reference

Review the official source

Ubiquiti Help Center — Configuring Door Unlock Methods in UniFi Access · Verified October 15, 2026

Open official reference ↗
Plan the next step

Need help applying this guidance safely?

DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.

Talk with DSE