Access Control for Multi-Tenant Buildings in Chicago (Complete Guide)

Multi-tenant buildings present unique access control challenges that single-tenant offices don’t face. Multiple companies sharing common entrances, elevators, and parking — each with different security requirements, staff turnover rates, and management styles. Here’s how to design a system that works for everyone.

The Multi-Tenant Challenge

In a typical Chicago multi-tenant building, you have:

• A shared main entrance and lobby
• A shared parking garage with assigned and visitor areas
• Multiple tenant floors, each needing independent access
• Common areas: conference rooms, fitness center, loading dock, rooftop
• A building management office that oversees the shared infrastructure
• 5 to 50+ separate tenant organizations, each managing their own people

The access control system needs to serve all of these stakeholders without creating a management nightmare for any of them.

Architecture: Centralized vs Distributed

Centralized (Building-Managed)

One system, managed by building management, controls everything. Each tenant submits access requests through the management office.

Pros: Single point of control, consistent security policy, easier to audit. Cons: Tenant credential changes depend on management office responsiveness. Doesn’t scale well past ~20 tenants.

Best for: Smaller buildings with a responsive management office.

Distributed (Tenant-Managed with Building Overlay)

The building controls shared areas (lobby, garage, elevators, common spaces), while each tenant independently manages their own floor/suite access.

Pros: Tenants control their own access in real-time. No bottleneck at the management office. Cons: Requires compatible systems or a platform that supports multi-tenant partitioning.

Best for: Larger buildings, buildings with high tenant turnover, tech-forward properties.

Our Recommendation

For most Chicago multi-tenant properties, the distributed model using Brivo works best. Brivo’s cloud platform natively supports multi-tenant partitioning — building management controls shared doors while each tenant gets their own admin portal for their spaces. Credential provisioning happens in minutes, not days.

For buildings that prefer on-premise infrastructure, Paxton Net2 can be configured with operator permissions that give tenants limited management access to their own areas while keeping building-wide control with management.

Door-by-Door Planning

Main Entrance and Lobby

The front door is shared by everyone. Options:

• Open during business hours, secured after hours — simplest approach. Use a time schedule in the access control system to automatically lock and unlock.
• Always secured with free exit — every person badges in. Provides a complete audit trail but requires every tenant’s visitors to either be pre-registered or escorted.
• Intercom for visitors, badges for tenants — most common hybrid. A video intercom handles visitor access while tenants use cards or mobile credentials.

Elevator Control

In buildings where tenants occupy full floors, elevator access control restricts floor buttons based on credentials. After badging at an elevator reader, only your authorized floors become available.

This requires integration between the access controller and the elevator system — a project that needs coordination with the elevator maintenance company. Brivo and most enterprise access platforms support elevator floor integration through relay modules.

Parking Garage

Garage access typically uses long-range readers — either proximity cards with extended range or Bluetooth mobile credentials. The goal is that drivers don’t need to roll down their window in January to badge a reader.

For visitor parking, options include:

• Parking validation by tenant (digital or physical)
• Temporary parking credentials issued by management
• License plate recognition integrated with the access system

Tenant Suite Doors

Each tenant’s suite entrance should be on their control. The most common configuration:

• Smart card reader at each suite entrance
• Tenant admin manages their own users through web portal or app
• Building management retains emergency access override

Common Areas

Conference rooms, fitness centers, mail rooms, and rooftop terraces need access rules that balance availability with security:

• Conference rooms — All tenants can access during business hours, locked after hours
• Fitness center — Only tenants who pay for the amenity
• Loading dock — Scheduled access for deliveries, always accessible to building maintenance
• Rooftop — Restricted access with audit logging

Hardware Recommendations for Chicago Buildings

Location	Reader Type	Controller	Notes
Main entrance	Brivo Smart Reader	ACS300	Weatherproof, supports mobile
Garage entry	Long-range Bluetooth	ACS300	Hands-free vehicle access
Elevator	HID Signo	ACS6000	Flush-mount, works with most elevator systems
Suite doors	Brivo Smart Reader	Per-tenant controller	Tenant-managed
Common areas	HID iCLASS SE	Building controller	Schedule-based access

Network Requirements

Multi-tenant access control systems are IP-networked. This means:

• Every reader and controller needs a network connection
• The network must be segmented — access control traffic should not share VLANs with tenant data or guest Wi-Fi
• Bandwidth requirements are modest (under 1 Mbps per controller) but reliability is critical — a network outage shouldn’t lock people out
• Backup connectivity (cellular failover) is recommended for cloud-managed systems

Migration from Legacy Systems

Many Chicago multi-tenant buildings still run outdated access control — key fobs with no audit trail, standalone magnetic locks with no central management, or systems from companies that no longer exist.

The migration process:

1. Audit current doors and hardware — which doors are controlled, what hardware is installed, what wiring exists
2. Identify reusable infrastructure — existing wiring, door hardware, and reader locations that can be retained
3. Deploy new controllers alongside existing — phase the transition door by door to avoid service interruption
4. Credential transition — issue new credentials to all tenants with a defined cutover date
5. Decommission old system — only after all doors are on the new platform

This process typically takes 2-6 weeks for a mid-size building. Contact Vidimost for a migration assessment — we specialize in phased transitions that keep buildings operational throughout the process.

Call (872) 254-5015 to discuss your building’s access control needs.