Contractor and Visitor Access in a Dubai Community: The Gate, Then the Door

Getting a contractor into your villa in a Dubai community takes two separate approvals, and your smart lock only handles one of them. The community manager decides whether he gets past the boom barrier. You decide whether he gets through your front door. Buy a lock expecting it to solve the first one and you’ll spend AED 675 finding out your AC technician is still parked outside the gate arguing with security.

This is written for whoever’s organising it. The resident booking an AC company, the owner running a villa from Abu Dhabi, and the facilities admin covering forty units. What each visitor needs, which credential to hand them, what hours they’re allowed to work, and what the whole thing costs.

How does access work in a Dubai community?

There are two layers and they’re run by different people.

The gate is the community manager’s. In an Emaar community that’s Emaar Community Management, and since 1 July 2021 only contractors holding a digital permit get in. Nakheel runs its own access permit process and asks for the contractor’s trade licence, insurance, Emirates ID and a copy of the contract between the contractor and you. Damac communities run through the Damac Living app and issue a QR pass the driver scans at the barrier. The portals differ, the principle doesn’t. Somebody at the community approves your visitor before your visitor reaches your street.

The door is yours. That’s where a smart lock earns its money, and it’s the only layer we can help you with.

The mistake we see most often is treating these as one thing. Someone buys a lock and a gateway so the cleaner can let herself in on Tuesdays, then discovers she’s been getting in on a household staff permit nobody renewed, or that the handyman she brings along has no permit at all and gets turned away at 10am while she’s standing at your door.

Who needs what to get in?

Based on Emaar’s master community rules for the Emirates Living villas, published on ecm.ae. Other communities run the same shape with different paperwork, so read your own rules rather than assuming this transfers.

Two lines in there catch people out.

You can’t lend your resident access card. The rule says it plainly, and it also bars anyone from using a card issued for a different property. Handing your card to the cleaner is a breach of the community rules, not a grey area, which is the practical reason to give her a credential on your own door instead.

And if you run a holiday home in an Emaar community, self check-in isn’t the free ride the marketing suggests. The rules put an authorised operator on site for check-in and check-out. Your lock still saves you the key handover and the 2am callout, but it doesn’t remove the requirement to turn up.

What permit does a contractor need, and who applies for it?

The contractor applies. Not you. Your job is to check they can before you sign anything.

Emaar runs three types through ecmpermits.ae:

Short term. Two days only. AC servicing, ad hoc maintenance, carpentry, plumbing, minor garden repairs, cabling.

Long term. For regular maintenance under an ongoing contract. Annual AC maintenance, pest control, PPM, regular garden work, anything running past two or three days. When they apply they have to give your email address, and you have to approve the request on the community portal. If you ignore the email, the permit doesn’t issue.

Home modification. Only for work that already has a home modification NOC from the community manager. The NOC approval email carries a reference number and the contractor needs it to apply. We wrote separately about how the developer NOC process works for a lock change.

To get anywhere near that, the company registers itself on the portal and pays an annual registration fee against a staff package, then adds staff and vehicles. Staff have to be on the company’s own visa. The documents are trade licence, the manager’s passport and Emirates ID, the representative’s passport, then per person a photo, passport, visa and Emirates ID, plus vehicle registration cards. Approvals take about a business day. The permit comes back as a QR code that gets scanned at the gate.

We couldn’t find a published figure for the registration fee or the staff packages anywhere on the portal, so ask Emaar Community Management directly rather than budgeting off a number someone quoted you. And the community manager can refuse a contractor at any time, which is written into the rules.

So before you book a cheap handyman off a classifieds site, ask whether his company is registered on your community’s portal. If it isn’t, the AED 200 you saved buys you a morning of him sitting at the gate.

What hours is a contractor allowed to work?

Shorter than you think, and this is the bit that decides what you set your passcode to.

In the Emirates Living villa rules, personal equipment can only be used between 8am and 8pm. Then noisy work, power tools, garden blowers, anything loud, is banned from 8am to 10am, from 1pm to 3pm, and after 5pm.

Do the subtraction and a contractor with a drill has two windows: 10am to 1pm, and 3pm to 5pm. Five hours in a twelve hour day.

Bulk deliveries and removals are tighter still. Monday to Saturday, 10am to 1pm, and not at all on public holidays.

So the default that everyone sets, 9am to 6pm, is wrong twice over. It’s open for four hours when the man isn’t allowed to make noise, and it’s open for an hour after he should have left. Match the code to the community’s window and the code enforces the rule for you.

Check your own community’s document. These are Emaar’s villa rules for one master community and the times vary between developers and between towers and villas.

Which credential should you give which visitor?

Our rule of thumb is that contractors get a timed passcode, never an eKey and never a card. A card walks off site in a van. A timed code dies on its own.

Decide one more thing before you issue anything, which is whether you want the person identifiable in the log. A shared code for “the AC company” tells you a visit happened. A separate code per technician tells you which one turned up. On a job where something goes missing three weeks later, that difference is the whole reason you’re keeping a log.

Do you need a gateway to hand out temporary access?

For a contractor, yes. For a guest, not necessarily.

A battery lock speaks Bluetooth, not Wi-Fi, because a Wi-Fi radio would flatten the batteries in weeks. So the lock has no way of talking to your phone from across town on its own. A gateway is a small mains-powered box inside the house that sits between the lock’s Bluetooth and your router, and that’s the AED 179.99 line most people don’t budget for.

Without a gateway, on a TTLock lock, you can still generate a one-time or timed passcode from anywhere. The app and the lock share the same algorithm, so a code created on your phone in DIFC works on a lock that’s never heard of it. No internet involved at the door.

What you can’t do without a gateway are the two things that matter most on a contractor job.

You can’t revoke early. If the job finishes at 11am and you want the code dead at 11am, the deletion has to be written into the lock, and that means someone standing next to it with the app open.

And you can’t see the log until you get home. The unlock records sit on the lock and upload when your phone next connects over Bluetooth. That’s fine for curiosity and useless when you’re trying to check at 11.30am whether anyone turned up.

So on a villa you leave empty during working hours, the gateway is the thing you’re buying and the lock is what it plugs into. Put it within a few metres of the door and away from the metal of the door itself.

Two things we should say plainly here. This describes TTLock behaviour, which is what most of our locks run, and Tuya and the brand-specific apps handle offline codes differently, so confirm it on the model you’re buying. The SwitchBot range needs a SwitchBot hub for remote control and we don’t stock one, so through us those locks are Bluetooth only.

A worked example: annual AC service while you’re at work

Villa in Arabian Ranches, you’re in DIFC, the AC company is on an annual contract. Altix R9 on the door with a G2 gateway inside the hallway.

1. Two weeks out, you ask the AC company one question before renewing: are you registered on ecmpermits.ae? They are, on a staff package covering six technicians.
2. They apply for a long term permit, because an annual contract isn’t two days of work. They enter your email address on the application.
3. You get the request on the community portal and approve it. This is the step people miss. No approval from you, no permit.
4. Roughly a business day later the permit issues with a QR code against named staff and a named vehicle.
5. Monday evening, they confirm Tuesday 10am. You open TTLock, select the villa’s lock, go to Passcode, choose Timed.
6. You set it 10am to 1pm. Not 9am to 6pm. That’s the community’s noisy work window and it’s also when they said they’d come.
7. You send the six digits by WhatsApp to the technician’s own number. Not the company group, where it sits in the chat history of nine people.
8. 10.20am, the van reaches the gate. Security scans the QR against the permit and logs the vehicle in.
9. 10.35am, the code goes into the keypad. The G2 pushes the unlock event to your phone while you’re in a meeting. You now know they’re in without calling anyone.
10. 12.50pm they leave. At 1pm the code stops working, whether or not anybody told you the job was done.
11. Thursday they call back, they forgot a filter. The Tuesday code is dead. The gate permit may still be valid, but the door isn’t, so you issue a fresh one-time code from your desk. That’s the moment the AED 179.99 gateway pays for itself, because without it you’d be driving home or handing out a code you can’t kill.

What does it cost?

Prices verified on our own site on 10 September 2026, including VAT.

Villa front door, remote issue and revoke

Renter who can’t drill the door

Bluetooth only through us, because we don’t stock the SwitchBot hub. You can issue codes standing at the door, not from the office. If you’re renting, read our guide on permission, deposit and move-out for a rented Dubai apartment before you fit anything.

Operator or facilities admin, several doors, staff carrying cards

There’s a contradiction on our own site we should straighten out rather than hide. Our post on installation cost quotes labour at AED 150 to 350, our mortise fitting product sells at AED 450, and our cylinder fitting product sells at AED 350. Three numbers for one job. Ask us for the price on your door and we’ll give you one figure. And if you’re fitting six or twelve doors on one visit, don’t pay a single-door callout rate twelve times over. Message us for a batch price.

Two add-ons come up on this topic often enough to name. An Altix DB2 video doorbell at AED 234.99 lets you see the person before the code goes in. An AL501 at AED 779.99 puts the camera in the lock instead. We compared those two properly in the video doorbell versus camera lock post.

What this doesn’t solve

Nothing in any community rulebook we’ve read requires a smart lock on any door. If a salesman tells you the 2026 rules mandate one, he’s making it up.

We can’t get your contractor a gate permit. That’s the community manager’s process, we’re not an agent for it, and we have no influence over whether they approve anybody.

A door log records that a credential was used, which is not the same as proof of who walked in. If your technician props the door open for his colleague, the log shows one entry and two people were inside. Treat it as a timeline and describe it that way to anyone who asks.

None of this stops theft by someone you invited in. It shortens the window they have and it tells you when that window opened.

And if you’re in an apartment rather than a villa, the corridor outside your door is common property. A code on your own door is your business. Anything mounted on the corridor wall, or a camera pointed down a shared hallway, is the building’s business and a SIRA conversation. We covered where that line sits in the doorbell post.

Buy the setup that lets people in while you’re at work

How can Altix help?

We fit the door layer and we’re honest that the gate layer isn’t ours. Send us a photo of your door edge and tell us the community, and we’ll come back with the lock that fits, whether you need the gateway, and one installation price rather than three.

If you’re running multiple units, tell us how many doors and how many staff and we’ll price the whole site, including card encoding, instead of quoting a single-door rate over and over.

Message us on WhatsApp and we’ll answer the same day.

Frequently asked questions

Can I just give the contractor my community access card?
No. The community rules prohibit lending your access card to anyone, and they also prohibit using a card issued for a property you don’t own, occupy or visit. The contractor needs his own permit through the portal.

Does a smart lock get my contractor through the gate?
No. The two systems don’t talk to each other and there’s no product that joins them. Your lock starts working at your front door.

My contractor isn’t registered on the community portal. What now?
Either he registers his company, pays the annual fee and adds his staff, or you use someone who’s already registered. In an Emaar community, since July 2021 there’s no third option. Ask the question before you agree a price.

Do I need a gateway to give someone a temporary code?
Not to create the code. A TTLock timed or one-time passcode works offline. You need the gateway to kill a code early and to see the unlock in real time, which is the whole reason to have one for contractor access.

How many passcodes can the lock hold at once?
It varies by model and the number is often lower than the marketing suggests. Tell us which lock you’re looking at and we’ll give you the figure for that model rather than a category average.

Can I see who came in and when?
You can see which credential was used and when. Give each technician his own code and the log becomes useful. Give the whole company one shared code and it only tells you a visit happened.

What about the housemaid, is a door code enough?
For your door, yes. For the community, no. Household staff need a valid residence visa sponsored by you and a household staff permit issued by the community. The door credential and the permit are separate things.

Does any of this need SIRA approval?
A lock on your own front door, no. Cameras covering common areas, or an access control system at a commercial site, is a different conversation and one to have with SIRA directly. We don’t claim SIRA certification on any residential lock we sell.

Sources for the community rules cited above: Emaar Community Management master community rules for Emirates Living villas and the ECM contractor permit factsheet, published on ecm.ae and ecmpermits.ae. Nakheel and Damac processes summarised from publicly available guides. Rules change and vary by community, so read the document your own community manager issues.