Rev 2026-07-30 TCEC Access Control System Documentation

CHAPTER 05User Manual — Daily Operations

Day-to-day operation of the TCEC access control system for tenants and the building manager.

5.1 Accessing the System

InterfaceURL / AddressUsed For
Access Control UIprox.tcec.caAccess log, arm/disarm, tenant management
Home Assistantha.tcec.ca · 192.168.191.121:8123Full HA configuration and entity control
SSH (admin only)ssh -i ~/Desktop/id_rsa root@192.168.191.121 (key-based; ha.tcec.ca does not accept SSH)File editing, log tailing
Kiosk (on-site)Pi 4 at 192.168.191.109 — auto-starts on bootOn-site display of access log
Documentationprox.tcec.ca/app/manualThis manual

5.2 Reading the Access Log

The access log at prox.tcec.ca shows all card swipe events in reverse chronological order.

ColumnContent
TimestampDate and time of the swipe event
TenantName and card number of the cardholder
DoorDoor ID that was swiped (e.g. 123b, main_entrance)
ResultGranted   Denied   Armed   Disarmed — stored at event time
PhotoThumbnail if a camera captured the entry

5.3 Arming the Building

Design Principle: The system prioritises availability over purity — a valid card swipe always disarms. Accountability is enforced through audit logging, not lockouts.

5.4 Disarming the Building

Any valid tenant card swiped at any door reader disarms the system. You do not need to return to the arming station. The disarm event is logged with tenant identity and timestamp.

The System Administrator may also arm or disarm via the button in the access control web UI — these events are logged as System Administrator.

5.5 Viking C-4000 Intercom — Visitor Entry

5.6 Managing Tenants and Cards

Tenant and card management is done entirely through the access control web UI at prox.tcec.ca. Direct SQLite access is no longer required for day-to-day tenant work.

Add a new tenant and card

From the Tenants page, click + Add tenant and fill in the details. The card number uses the printed facility:card format shown on the reader (e.g. 011:31623). Leaving the card field blank creates the tenant without a card assigned.

Add tenant form filled in with an example tenant
Tenants → + Add tenant

Grant door access

Individual tenants don't get door access directly — access is controlled by user groups. On the Groups page, check the cell where a user group should have access to a door group, then click Save permissions. Assign the tenant to the appropriate user group from their tenant record.

Group permissions matrix on the Groups page
Groups → Group permissions matrix

Deactivate a card

Open the tenant's record from the Tenants page and click Edit. To remove just the card while keeping the tenant record, click ✕ Unassign next to the card number field and save. To deactivate the tenant entirely (revoking all access), set Status to Inactive.

Edit tenant modal showing the Unassign button and Status set to Inactive
Tenants → Edit → Card number / Status

Query recent denials

The Access Log page lists every access attempt with door, card, and result. Denied attempts are shown in red with a reason (e.g. unrecognized_card); use the Door, Tenant, or Company filters to narrow results.

Access log showing granted and denied entries
Access Log

5.7 Voice Announcements

← Previous4 · ConfigurationNext →6 · Maintenance