What you need to know
Review local administrator credentials alongside two-step entry so the documented Admin Mode boundary stays visible.
Potentially affected
Applies to supported UniFi Access two-step readers and their documented Admin Mode behavior. This is a boundary in the product’s workflow, not a claim that every administrative action has identical authorization.
DSE recommendation
DSE recommends reviewing local administrator credentials whenever a site adopts two-step entry.
Review local administrator credentials alongside two-step entry so the documented Admin Mode boundary stays visible.
Source facts
UniFi Access two-step entry can require two enabled methods or an additional designated approver within the configured time window. The guide separately states that this requirement applies to normal door-unlock workflows, not entry into Admin Mode on camera-equipped readers. Access admins can enter that mode with their assigned NFC card or PIN even when two-step entry is enabled. The feature also has specific application, console, hub, and reader firmware requirements rather than applying uniformly to every reader.
Source: Ubiquiti Help Center — Configuring Door Unlock Methods in UniFi Access.
Applicability
Applies to supported UniFi Access two-step readers and their documented Admin Mode behavior. This is a boundary in the product’s workflow, not a claim that every administrative action has identical authorization.
DSE recommendation
DSE recommends reviewing local administrator credentials whenever a site adopts two-step entry. Document who can enter reader Admin Mode and distinguish that authority from the ordinary user’s two-method requirement. Confirm the supported hardware and firmware set before rollout, and decide whether the goal is two credentials from one person or approval by another person. Include these choices in staff training so the word two-step is not treated as a universal description of all reader interactions.
Verification
On an approved reader, test an ordinary user’s configured entry sequence, an absent or late second step, and a designated administrator’s Admin Mode entry. Confirm the intended privilege boundaries without leaving an administrative session unattended. Record device versions and tested account types so results are not generalized to unsupported readers.
Official reference
Ubiquiti Help Center — Configuring Door Unlock Methods in UniFi Access. Reviewed October 15, 2026.
Review the official source
Ubiquiti Help Center — Configuring Door Unlock Methods in UniFi Access · Verified October 15, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE