Elevator Access Control: Securing Every Floor in Your Building with Acre

Most building security strategies treat elevators as an afterthought. Perimeter access gets a card reader. The lobby gets a reception desk. But the elevators themselves, the fastest route from a public ground floor to a restricted executive level or data suite, often remain open to anyone who walks in.

That gap is a predictable security risk. An unauthorized visitor who clears the front desk can reach any floor without a credential check. In multi-tenant office buildings, residential buildings, and mixed-use developments, this exposure is the most common path unauthorized users take to reach restricted areas.

Elevator access control closes that gap. With Acre Security's access control system, building managers can restrict access to specific floors, tie elevator access to the same credentials used at every other entry point, and manage permissions remotely from a single platform. 

Note: If your building's elevators are still open to anyone who can press a button, every secured door in your building has a workaround. Acre Access Control ties floor-level elevator access to the same credentials, permissions, and audit trails that govern every other entry point, so unauthorized users cannot bypass your security by simply riding to the right floor.

Talk to the Acre team to see how elevator access control fits into a unified building security platform.

Why Elevator Access Control Is a Critical Layer of Building Security

An elevator access control system verifies identity before enabling access to a specific floor. Rather than allowing any occupant to reach any level, the system grants elevator access only to those with the appropriate credentials for the relevant floors at the relevant times.

Without elevator access control, every door secured by a standard door access control reader is effectively bypassed the moment a person reaches the correct floor via an unrestricted elevator. Elevator access control systems enhance building security by ensuring only authorized individuals can reach restricted floors, and they reduce security risks associated with tailgating, card sharing, and unauthorized visitors who gain access to certain floors without any credential challenge at the floor itself.

For building managers overseeing modern buildings with elevator banks serving multiple tenants, this challenge is more complex. Each carriage must enforce consistent access rules per floor, per tenant, and per time window, and must remain integrated with the rest of the building's security systems to provide a complete operational picture.

How Acre Access Control Manages Elevator Access

Acre Access Control is a cloud-native, API-first access control platform that extends the same role-based permission logic governing door access to floor-level elevator control. Building managers define which floors each user or role can reach, set time-based restrictions, and update permissions instantly from a centralized dashboard without being on-site.

Rather than managing the elevator access control system separately from the rest of building security, Acre's platform handles elevator access alongside door control, visitor management, and intrusion monitoring in one place. Key capabilities include:

• Floor-level access permissions tied to user roles, so only those with the right elevator access control credentials can reach restricted floors
• Time-based restrictions limiting certain floors to authorized personnel outside business hours
• Temporary access for contractors and visitors with automatic credential expiry
• Real-time audit trails showing elevator usage by user, floor, and time
• Single-click lockdown restricting elevator access across the building or specific elevator banks immediately when a security event occurs

The platform supports deployments from smaller buildings to large multi-site portfolios, with an API-first design that integrates with video surveillance, HR systems, and visitor management tools without requiring additional middleware.

To compare the cost of Acre's unified platform against maintaining a fragmented elevator security system, use the Acre TCO calculator.

Elevator Access Control Credentials: Mobile, RFID, and PIN

The credentials used in an elevator access system determine how secure and manageable it is in day-to-day operation. Acre supports the full credential range through its access control platform.

RFID cards and fobs are the most widely deployed elevator access control credentials. Users tap or swipe at a reader in the elevator lobby or elevator cab to authenticate before floor selection. RFID is familiar and scalable, but the security risks are well established. Cards can be lost, shared, or cloned, and a compromised credential carries its access rights until it is reported and deactivated.

Mobile credentials remove those vulnerabilities. Acre Wallet, a mobile credential capability, replaces physical cards with secure mobile access using BLE and NFC technology, protected by the user's biometric authentication. A stolen device cannot be used for elevator access without the owner's Face ID or fingerprint. Credentials are managed centrally through Acre's platform, so lost devices are deactivated immediately with no physical replacement required. For building managers with high user volumes or frequent contractor access, mobile credentials reduce administrative overhead substantially.

PIN codes are used where a secondary authentication factor is required. Their key limitation is shareability: a PIN can be passed to another user without any audit trail. Acre's platform supports PIN-based elevator access where operationally required while providing the audit visibility to surface anomalous access patterns.

Smart Elevators, Destination Dispatch, and Integrated Access Control

Smart elevators use destination control systems to optimize traffic flow. Users enter their desired floor on a digital touchscreen in the elevator lobby before boarding, and the system assigns the most efficient elevator car for that destination. Destination dispatch systems create a natural integration point for elevator access control, because the floor selection and credential verification happen at the same moment before the user boards.

Acre's access control platform integrates with elevator control systems through its API-first architecture, enabling the floor-level permissions defined in the platform to govern destination dispatch assignments. Authorized users reach their floors efficiently. 

Users without access to a requested floor are denied at the point of selection rather than at the floor. For modern buildings with smart elevators, this integration applies elevator access control at the earliest possible point in the journey.

Visitor Access and Temporary Elevator Credentials With Acre

Visitor access is one of the most demanding aspects of elevator access control management. Visitors authorized to reach a specific floor for a meeting need a working credential. Visitors with no legitimate reason to reach restricted floors need to be stopped before they board.

Acre's Enterprise Visitor Management integrates directly with the access control system to handle visitor credentials automatically. Visitors pre-register digitally and receive a time-limited access credential covering only the floors relevant to their visit. The credential controls elevator access as well as any other access points the visitor requires. When the visit ends or the credential expires, elevator access is revoked automatically, with a complete audit log of every floor accessed.

For contractors needing temporary access to specific floors, the same logic applies. Time-limited credentials tied to the relevant floors expire automatically when the work is complete, removing the need for manual credential revocation after every contractor visit.

Common Vulnerabilities in Elevator Security Systems

Even well-configured elevator access control systems face vulnerabilities that require active management. The three most common are tailgating, card sharing, and fire service mode misuse.

Tailgating occurs when an unauthorized individual follows an authorized user into the elevator car before the doors close, gaining access to restricted floors without presenting credentials. It is a significant security risk in high-traffic elevator lobbies. Video surveillance integrated with elevator access control through Acre's platform, combined with access event alerts, reduces both the frequency of tailgating incidents and the likelihood they go undetected.

Card sharing, where users lend elevator access control credentials to others, is harder to detect without audit analysis. Acre's access logs surface anomalous patterns, such as a single credential presenting from two locations within a short window. Moving to mobile credentials further reduces card sharing risk, since biometric-protected smartphones cannot be shared the way physical cards can.

Fire service keys are a known security vulnerability in elevator security systems, since they can be obtained and used to gain access to all floors outside a genuine emergency. Logging and flagging fire service mode activations through access control management software enables rapid security team response to misuse.

Integrating Elevator Access Control With Building Security

Integrating elevator access control with broader building security systems moves the elevator access system from a standalone tool to part of a cohesive security framework. Elevator access events, visitor records, intrusion alerts, and CCTV footage become part of the same operational picture when they feed into a single platform.

Acre's access control platform connects elevator access control with video surveillance through its API-first architecture, enabling correlated footage for any elevator access event. Acre Intrusion Connect adds a detection layer beyond what elevator access control alone provides: unauthorized access attempts at any building entry point can trigger elevator lockdowns automatically, limiting unauthorized movement before it reaches restricted floors. Comnet by Acre provides the network infrastructure, including industrial-grade Ethernet switches and edge video storage, that keeps these integrations reliable and always operational.

Manage Elevator Access Control Across Every Floor With Acre

Elevator access control is part of the broader challenge of managing authorized access to every part of your building. Organizations including The Ritz London rely on Acre Security for access control across complex environments where building security demands are high and gaps cannot be tolerated.

If your building's elevator access system is not integrated with your access control management software, or if floor-level access is still managed without a centralized platform, talk to the Acre team to see how Acre Access Control addresses elevator security alongside every other access control requirement in your building.

Frequently Asked Questions About Elevator Access Control

What is the access control system in an elevator?

An elevator access control system restricts which floors a user can reach based on verified credentials and defined permissions. Rather than allowing any occupant to select any floor, the system requires a valid credential before enabling access to restricted floors. Acre's platform manages elevator access control alongside door and building access from a single dashboard.

What are the 4 types of access control?

The four primary models are role-based access control (RBAC), where permissions are tied to job roles; rule-based access control (RuBAC), where conditions such as time or location govern access; task-based access control (TBAC), where access is granted only for the duration of a specific task; and identity-based access control (IBAC), where permissions are tied directly to individual identities. Acre's platform supports all four, enabling building managers to apply the right access logic to each floor or user type.

What is the 3/4 rule for elevators?

The 3/4 rule is a traffic planning guideline recommending that elevator systems be designed to handle 80% of peak demand within a five-minute window. For buildings with ten or more floors, three to four carriages are typically recommended. From an access control standpoint, each carriage in an elevator bank must have consistent, centrally managed access rules to avoid creating access inconsistencies between units.

What city in the world has the most elevators?

New York City has the highest concentration of elevators globally, with an estimated 70,000 units in operation. The density of high-rise office buildings and residential buildings makes elevator access control a central building security consideration at a scale most other cities do not match.