Room by Room Access in a Permitted Shared Villa: What Goes on Which Door

Put the smart lock on the main door. Leave most bedroom doors mechanical. That’s the honest answer for a six-room permitted villa in Dubai, and it’s the opposite of what most access control suppliers will tell you.

The main door is the one every resident touches every day, and it’s the one where a key that walked out with a former resident exposes the whole house. A bedroom door is a privacy door. It gets slammed twenty times a day, it sits on a thin leaf, and the person behind it already has a lockable wardrobe. Smart locks earn their place on bedroom doors at scale and short stays, not at six rooms with twelve-month residents.

Dubai Law No. (4) of 2026 came into force on 26 August 2026. If you hold a Dubai Municipality permit, or you’re working towards one before the 26 August 2027 deadline, you’re now deciding hardware for eight or ten doors at once instead of one. This is how we’d spec it, door by door, with what each part costs today.

If you haven’t read the permit side yet, start with our Dubai shared housing law access control checklist. This post assumes you’re past that and buying.

What does Dubai Law No. 4 of 2026 require on the doors?

Nothing. There’s no clause anywhere in the published law or the law firm summaries that requires a smart lock, a card reader or an audit log on any door in a shared villa.

What the law does say changes how you lay the villa out before you buy a single lock:

• No unit can be allocated for shared housing without a permit from Dubai Municipality. Permits run one year, renewable, with a two-year option on request. Renewal goes in at least 30 days before expiry.
• An ordinary tenant can’t sublet a room, a partition or a bed space. Only the owner or an authorised establishment can.
• Minimum usable sleeping space is reported at 4.5 sqm per person, measured on net internal living areas. Balconies, kitchens, corridors and bathrooms don’t count towards it.
• Kitchens, bathrooms, corridors, store rooms, balconies and parking spaces can’t be turned into bedrooms.
• Dividing a bedroom, living area or balcony with wooden or non-fire-rated gypsum board without a Dubai Municipality permit is illegal.
• Fines run AED 500 to AED 500,000, doubling to AED 1 million on a repeat violation in the same year.
• The permit is issued only after the property is confirmed compliant on planning, construction, health, sanitation, fire safety, electrical safety and security.

That last word is the one people point at when they call us. “Security” is a permit condition, so operators assume there’s a hardware spec behind it. We haven’t found one. What we’ve found is a general compliance requirement, which an inspector reads in the round.

So treat everything below as our commercial and installer opinion, not regulation. A lock on a door does not make an illegal partition legal, and we’ve had that conversation more than once this year.

Gulf News has also reported that shared housing tenancy contracts have to be officially registered. Confirm the current position with Dubai Municipality before you sign anyone in, because that part is still moving.

Which lock goes on which door in a shared villa?

A six-bedroom villa in Al Warqaa isn’t six identical doors. It’s five or six different jobs.

All prices verified on altix.ae on 8 September 2026 and every item above was in stock that day. Prices move.

Two rows in that table decide your budget.

Start with the bedroom door, because it’s thinner than you think. UAE internal doors are commonly 35 to 45 mm and often hollow-core with a small timber lock block. A front-door smart lock is built around a 6068 mortise pocket in a 40 to 50 mm solid leaf. Buy eight front-door locks for eight bedrooms and you’ll find out on install day that half the leaves need machining or replacing, and your cost per room jumps before the first resident moves in. Our Smart Hotel Door Lock is the only unit in this set that publishes a door thickness range, 35 to 55 mm, which is why it’s the one we put on bedrooms rather than an R5 or an R9.

The store room is the door people forget. It holds the bleach, the DB board and the spare linen, and it’s the one door where resident access is a liability rather than a convenience. It’s also the door an inspector can see straight into.

For the resident’s side of this, the wardrobe and drawer question, we wrote that separately in securing your belongings in shared accommodation.

Do you need a smart lock on every bedroom door?

No, and the arithmetic says so plainly.

The Smart Hotel Door Lock is AED 949.99. A keyed mechanical lever lockset fitted is roughly AED 80 to 200 in this market, which is our estimate rather than a listed SKU on our site. Call the premium AED 800 a door.

Now price the thing a smart lock saves you. When a resident leaves without returning a key, the mechanical answer is a new lockset, so maybe AED 150 fitted. If that happens on four move-outs in ten, your mechanical door costs about AED 60 per turnover in hardware. At AED 800 of premium, you’d need around thirteen turnovers on that one door before the card lock has paid for itself in hardware alone. At six rooms with twelve-month residents, that’s a decade.

So don’t buy the card lock for the payback, because it isn’t there. Buy it for three things the mechanical door can’t do.

1. Revoke access in ten seconds. Someone leaves on a Friday night and you expire the card from your phone. You don’t drive to Al Warqaa with a screwdriver.
2. Keep a log. When a resident says their room was entered, you can say who opened that door and when. Mechanically you can say nothing, and you’re arguing with two people who both sound convincing.
3. Separate staff from residents. Housekeeping gets a card that opens every room between 09:00 and 13:00. Your night supervisor gets one that opens the main door and the store and nothing else. That’s four minutes of setup, and every mechanical version of it ends in a master key you’ll eventually lose.

Our line: below eight rooms with stays over six months, mechanical bedrooms and one good main door. At ten or more rooms, or where residents change every month or two, put cards on the bedrooms. Between those, it depends on whether you have staff, and staff is usually the deciding factor rather than room count.

What does it cost at 6 rooms and at 12 rooms?

Two real builds. Both assume one main door, one store room and one linen cupboard.

Six-room villa, mechanical bedrooms

Twelve-room operation, card locks on bedrooms

Bedroom fitting is the line we won’t fake. Our listed installation SKU is AED 450 per door in Dubai and Sharjah, AED 550 in Abu Dhabi, which would put twelve bedroom doors at AED 5,400 and take the build to AED 18,769.80, or AED 1,564 a room. Nobody should pay a single-door callout rate twelve times over on the same visit, and we don’t quote it that way. Batch work gets a batch price, and you’ll need to ask us for it.

While we’re being straight about pricing, our own numbers don’t currently agree with each other. Our Dubai installation cost guide puts labour at AED 150 to AED 350 a door, and the installation SKU on the shop sells at AED 450. We’re aware of it. Ask for the quote rather than reading either number as final.

How do you hand over a room in a day?

Six-bedroom permitted villa in Al Warqaa. Main door on an R9 with a G2 gateway. Bedrooms on mechanical locksets. Room 4 leaves Friday, the replacement arrives Saturday afternoon. Here’s the whole sequence.

1. Thursday 18:00. Outgoing resident confirms Friday departure on WhatsApp. You open TTLock on your phone.
2. Thursday 18:02. You set his main door passcode to expire Friday 23:59. He can still get in and out while he packs. You haven’t touched anyone else’s access.
3. Friday 11:00. He returns the bedroom key and the RFID card at handover. You check the card off your list. If the key doesn’t come back, this is the moment you decide whether Room 4 needs a new lockset, not two weeks later.
4. Friday 11:20. You unpair his card in the TTLock app. The card is now a piece of plastic. Keep it, they re-encode.
5. Friday 23:59. His passcode expires by itself. Nothing for you to do. If you forgot every other step, this one still fires.
6. Saturday 08:00. Housekeeping opens the villa with the staff card, strips Room 4, and puts the CB3 wardrobe lock back to factory reset if the outgoing resident fitted one.
7. Saturday 08:40. You check the main door battery level in the app while you’re in there. Four AAs, and you don’t want to find out at 22:00 on a Saturday.
8. Saturday 14:00. New resident arrives. Emirates ID and contract done in the majlis.
9. Saturday 14:15. You issue him a main door passcode valid from today to the last day of his agreement, from your phone, through the gateway. He tests it at the door while you watch.
10. Saturday 14:20. You hand over the Room 4 key and one RFID card, and you write both against his name in the same sheet you’d show an inspector.
11. Saturday 14:25. You tell him the store room and the linen cupboard are staff only, and why. Say it once at handover and you’ll say it less later.

That’s about twenty minutes of your time across two days, and no trip to the villa purely to change access. On mechanical bedrooms with a returned key, your hardware cost for that turnover is AED 0.

Which credential should each person get?

The main door is where this decision bites, because everyone in the villa uses it.

Our recommendation for a permitted villa: cards for residents, a personal passcode for the operator, app keys for you and one supervisor, and the mechanical key in an envelope you don’t open. Codes are for contractors and nobody else.

A code can’t be taken back. It can only be changed, and changing it means telling eleven other people the new one. A card is a per-person object you can kill on its own. Same problem, same fix as co-working access control, where it shows up with members instead of residents.

What goes wrong in a shared villa, and what it looks like

Batteries die on a Saturday night. Four AAs in an R9 last roughly a year of normal use, and a shared villa isn’t normal use. Twelve people through one door is closer to a small office. Change them on a schedule rather than on a warning, and keep a spare set in the store room.

Cards get demagnetised in a pocket with a phone and car keys. It presents as “my card stopped working”. Two-minute re-encode if you own an encoder, a lost evening if you don’t.

Bluetooth range disappoints people. These locks talk Bluetooth, which is why the battery lasts a year. The gateway is what gives you remote control, and it needs to be within range of the lock and on your Wi-Fi. In a two-storey villa with block walls, put the gateway in the hallway near the main door rather than in the majlis where the router sits.

Somebody props the main door open. Every villa has this. The lock is doing its job and your access log stops meaning anything. That’s a house rule to fix, and the log will show you when it’s happening.

A resident fits their own lock on a bedroom door. We see this and we understand why. It’s also a fire risk and a compliance risk that lands on you rather than on them. Put your position in the tenancy documents before it happens.

What we couldn’t verify

Being straight about the gaps, because the wrong assumption here is expensive.

We could not retrieve the specific clause in the UAE Fire and Life Safety Code covering locking devices on residential room and exit doors. The principle every installer works to is that any door on the way out has to open from the inside in one motion, with no key and no second thought, at 3am, by somebody who’s never read the manual. We fit to that rule. If you hold a Dubai Municipality permit, get your position confirmed by Civil Defence rather than by us.

We also could not find any requirement anywhere in the shared housing law for a lock, a locker or personal storage in a shared unit. Anyone telling you the law mandates smart locks is selling.

And we haven’t tested battery life on any of these units in a twelve-person villa. The manufacturer figure is up to twelve months on the hotel lock and about a year on the R9. Both assume a normal household. Yours isn’t one.

Buy the lock each door needs

How can Altix help?

Send us a photo of your villa’s main door and one bedroom door on WhatsApp. Include a tape measure against the bedroom door edge so we can see the leaf thickness, because that single measurement decides whether your bedrooms can take a card lock at all or need new leaves first.

We’ll come back with a room-by-room list, a batch fitting price rather than a per-door callout, and a straight answer on which doors we’d leave mechanical. If the answer is that you only need one smart lock and seven mechanical ones, that’s what we’ll quote.

We supply the hardware, do the site survey and set up the account structure so staff and residents sit in separate permission groups from day one. We don’t issue permits and we don’t advise on the law. Your permit is between you and Dubai Municipality.

Frequently asked questions

Does Dubai’s shared housing law require smart locks on bedroom doors?

No. The published law and the law firm summaries list security among the permit conditions alongside planning, construction, health, sanitation, fire safety and electrical safety. None of them specify a lock type. Treat any hardware recommendation, ours included, as commercial advice rather than compliance.

Can I put a front door smart lock on a bedroom door?

Sometimes, and it’s the wrong question to start with. Measure the leaf first. UAE internal doors are commonly 35 to 45 mm and often hollow-core, while front door mortise locks are built for a 40 to 50 mm solid leaf with a machined pocket. Our Smart Hotel Door Lock publishes a 35 to 55 mm range, which is why we spec it on bedrooms. Send us a photo and a measurement before you order anything.

What’s the cheapest legal setup for a six-room villa?

Around AED 2,485 all in, which is roughly AED 414 a room. That’s an R9 and a gateway on the main door, professional fitting, mechanical keyed locksets on the six bedrooms, and cabinet locks on the chemical shelf and the linen cupboard. Cheapest and legal aren’t the same thing though. Your permit compliance comes from the property, not the locks.

How do I stop residents sharing the main door code?

You don’t, so stop trying. Give each resident an RFID card instead of a code and keep codes for contractors. A card is a per-person object you can revoke on its own. A code is information, and information travels.

What happens when a resident loses their card?

You unpair it in the app and issue another one. Cards are AED 34.99 for five, so about AED 7 each. Buy two packs on day one for a six-room villa. If you’re running twelve rooms with an encoder at the desk, a replacement takes under a minute.

Do I need a gateway, or is Bluetooth enough?

Bluetooth is enough if you’re always at the villa. If you’re not, the AED 179.99 G2 gateway is what lets you issue and expire access from wherever you are. For an operator running more than one property, it isn’t optional. Put it in the hallway near the main door rather than next to the router.

Can a tenant install a smart lock on their own room?

Under the law, an ordinary tenant can’t sublet a room or a bed space in the first place, so the person doing this is usually already outside their agreement. Beyond that, a resident-fitted lock on a bedroom door creates a fire and compliance exposure that lands on the permit holder. Set your position in writing before move-in. If you’re the tenant rather than the operator, our renter’s guide to smart locks in Dubai covers what you can and can’t change.

Is the store room really worth locking?

It’s the door we’d do second, after the main door. It holds bleach and drain cleaner, the DB board and your spare stock. Resident access to any of those is a liability with no upside, and it costs AED 199.99 to close.