Home
Role-based access control
Learn about role-based access control.
Adding role members
To grant access to employees who do not meet automated provisioning policy criteria, Role managers can manually add role members in Genetec ClearID™.

About ClearID
Learn about the ClearID self-service physical access management solution.
What's new
Check out what's new in the latest update to ClearID.
Deployment preparation
Check your compatibility and deployment requirements.
Account configuration
Learn how to configure and customize the ClearID portal.
ClearID plugin
Learn how to download and install the plugin.
Managing identities and users
Learn how to manage identities and users.
Credential synchronization
Managing sites
Learn how to manage sites.
Managing visitors
Learn how to manage visit requests and access requests.
Managing areas
Learn how to manage areas.
Managing visitor watchlists
Learn how to manage visitor access using watchlists.
Role-based access control
Learn about role-based access control.
- About role-based access control
  Genetec ClearID™ role-based access control is an automated security framework that assigns specific roles to identities. By dynamically provisioning access to physical spaces based on user attributes, role-based access control ensures the right people have the right access at the right time, minimizing security risks and administrative overhead.
- Adding roles
  To configure role-based access control policies and group people with the same access rights, Account administrators must first add roles in Genetec ClearID™.
- Creating exceptions to the role membership request approval workflow
  To bypass standard approval processes and auto-approve specific requesters such as VIPs, you can create exceptions to the role membership request approval workflow in Genetec ClearID™.
- Configuring role managers
  To define policies or manage role members, Role owners must first configure Role managers in Genetec ClearID™.
- Configuring role-based access control policies
  To automate role assignments based on identity attributes and ensure access dynamically updates when an employee changes departments or locations, Account administrators and Role owners can configure role-based access control policies in Genetec ClearID™.
- Adding custom provisioning attributes to an identity
  To supplement default records and enforce specialized role-based access control policies, Account administrators can manually assign custom provisioning attributes to an identity in Genetec ClearID™.
- Adding role members
  To grant access to employees who do not meet automated provisioning policy criteria, Role managers can manually add role members in Genetec ClearID™.
- About role membership request workflow
  The Genetec ClearID™ role membership request workflow is an automated framework that manages the lifecycle of a request. By automating approvals and system state changes, this workflow reduces administrative overhead and allows reviewers to focus on critical tasks.
- Requesting role membership
  To simplify the approval process and request access for yourself or your team members, Employees, Managers, and Supervisors can request role membership using the Genetec ClearID™ self-service portal.
- Reviewing role membership requests
  To approve or deny pending access for employees, a Role manager, Role owner, and Supervisor can review role membership requests in Genetec ClearID™.
- Checking the status of role requests
  To ensure the organization remains security-compliant and audit-ready, Account administrators, Role managers, and Role owners can check the status of role requests in Genetec ClearID™.
- About role activity report
  In Genetec ClearID™, a role activity report is an audit trail of all activities related to roles. Each entry includes a timestamp, the type of activity performed, the user who initiated the action, and additional details such as the reason for the change.
- Viewing a role activity report
  To view a complete audit trail of system changes and monitor role-related activities, Account administrators, Role managers, and Role owners can view a role activity report in Genetec ClearID™.
Connecting to other systems
Learn how to connect ClearID to other systems.
Visitor management devices
Learn about the ClearID Self-Service Kiosk mobile app that simplifies visitor management and check-in.
Troubleshooting
Troubleshoot common issues that can occur.
Additional resources
Need tech support or product information? Check out these resources.
Glossary

Adding role members

2026-05-06

To grant access to employees who do not meet automated provisioning policy criteria, Role managers can manually add role members in Genetec ClearID™.

What you should know

When a provisioning policy is enabled, role members are added automatically based on policy rules.
Automatically added members appear in the Authorized by column as Provisioning policy.
Role members that match a provisioning policy are locked and cannot be removed.
Role members that no longer match a provisioning policy are immediately unlocked. They are automatically removed after the period specified in a provisioning policy.
You can also add members manually if they don’t match the policy but still need access. These are labeled as Manual in the Authorized by column.

Procedure

From the homepage, click Organization > Roles and select a role.
Click Members.
Click Add members.
Search for or select one or more members.
Enter a reason and click Add.
In the ADA Personnel role, two members were added by provisioning policy and one manually.

Click a name in the Name column to view or modify the identity details.
(Optional) To immediately remove any role members who no longer meet the policy criteria, or role members that were added manually, click and then click Remove.