> For the complete documentation index, see [llms.txt](https://help.security.gallagher.com/smb/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.security.gallagher.com/smb/smb-app/team/smb-key-tags.md).
# Physical Credentials
There are three physical credentials available with the Gallagher SMB solution - SMB Key Tags, SMB Cards & SMB Wearables. There are provided as an alternative credential to the Gallagher SMB app, should the user not want to use their phone.
{% hint style="info" %}
**What is an "SMB tag"?:** "SMB tags" refers to the available physical credentials, which are SMB Key Tags, SMB cards and SMB Wearables. The functionality and configuration for the different tag types are the same; the only difference is their physical shape and size.
{% endhint %}
An SMB tag can also be used to arm and disarm a site. Using an SMB tag, a single badge at the reader disarms the site and a double badge at the reader arms it.
A tag can also be used by someone who doesn’t want to (or can’t) bring a phone to site. Examples are courier drivers, gate access, locker access, shared facility access, or access to an area or site that is not armed (24-hour site).
***
### Assigning a tag
SMB tags are assigned to users using the Gallagher SMB app. A tag can be assigned when the user is created or assigned to an existing user. Any user role can be assigned a tag: Site Manager, Site Admin, or Site Member.
{% hint style="info" %}
* Tags are purchased from your install partner. Only Gallagher SMB Tags can be used with the SMB solution.
* Tags must be enabled for your site by your Technician, for you to assign them.
* Tags must be assigned using a mobile device, not via the browser version of the app, to ensure secure provisioning of the credential.
* Only Site Managers can assign tags. The Site Manager must log into the Gallagher SMB app (authenticate themselves) before a tag can be assigned.
* When a tag is assigned, the Gallagher Cloud will encode site-specific data to the tag using the phone’s NFC. Most Android phones support NFC. NFC must be enabled on the Android phone and enabled for the Gallagher SMB app. Only iPhone 7 (or later) supports NFC. iOS 13 (or later) is required.
* A user can be assigned only one tag per site. If the user exists across multiple sites (the same email address is used, and the Site Manager confirms this is the same person), then the one tag can be used for multiple sites.
* If the Site is in a [Credential Group](https://help.security.gallagher.com/smb-installer-portal/site-configuration/site-actions/credentials/credentialgroups), the Site Manager only needs to scan the tag once and the user can use the tag across all sites in that Credential Group, they have privileges for.
{% endhint %}
**Assigning a tag to a new user**
To assign a tag while creating a new user, perform the following procedure:
1. Navigate to the **My Team** screen within the SMB app.
2. Select the **+ ADD USER** button. The New User screen displays.
3. Populate the required fields.
**Note:** If the user does not need to use the app (i.e. they only use tags or User Codes), uncheck the **Mobile App User** check box. For example, for a cleaner or a courier, or when the user of the tag is not always the same person.
4. Select the **NEXT** button.
The Privilege screen displays.
5. If you are a Site Manager for more than one site, a list of sites appears. Toggle on the Sites for which this user requires privileges.
6. Select whether the user is a Site Manager, Site Admin or Site Member (for Access Control only). See User Privileges for more information on what each role can do.
7. If you selected 'Site Admin', select which areas of the site they can arm and disarm. If you selected 'Site Member', select which areas they can access. Site Managers have privileges for the entire site.
8. Select the **SAVE** button.
The Credentials screen displays.
9. Select the **ASSIGN TAG** button.
**Notes:** \
**-** This button allows you to assign all types of tags, i.e. Key Tags and cards. \
\- This button is only available for Site Managers in the mobile app if the site has tags enabled. \
\- The technician must have enabled the the 'Site uses tags' option in [Edit Credentials](https://help.security.gallagher.com/smb-installer-portal/site-configuration/site-actions/credentials/edit-credentials#site-uses-tags).\
\
The '**Ready to Scan**' pop-up displays.
10. Present an SMB tag to the phone. If the assignment is successful, the tag will show as assigned to the user.
The tag can now be used to request access at the doors that enter into the user’s privileged areas.
{% hint style="warning" %}
If the user belongs to multiple sites, you must use the multi-site feature to switch sites and assign the tag to the user within each site.
{% endhint %}
**Assigning a tag to an existing user**
To assign a tag to an existing user, perform the following procedure:
1. Navigate to the **My Team** screen within the SMB app.
2. Search for the user and click the downward arrow on their user card for more options.
3. Select the **Credentials** button.
The Credentials screen displays.
If the Site is in a [Credential Group](https://help.security.gallagher.com/smb-installer-portal/site-configuration/site-actions/credentials/credentialgroups) the name of the Credential Group will appear on the Credential card under the Additional Credentials section instead of the Site Name.
Any changes to a tag that is in a Credential Group will make the changes for all Sites within that Credential Group e.g. if you disable a tag, the user can no longer use that tag across any sites they have access to.
4. Select the **ASSIGN TAG** button.
**Notes:** \
**-** This button allows you to assign all types of tags, i.e. Key Tags and cards. \
\- This button is only available for Site Managers in the mobile app if the site has tags enabled.
The technician must have enabled the the 'Site uses tags' option in [Edit Credentials](https://help.security.gallagher.com/smb-installer-portal/site-configuration/site-actions/credentials/edit-credentials#site-uses-tags).
The '**Ready to Scan**' pop-up displays.
5. Present an SMB tag to the phone. If the assignment is successful, the tag will show as assigned to the user.
The tag can now be used to request access at the doors that enter into the user’s privileged areas.
{% hint style="warning" %}
If the user belongs to multiple sites, you must use the multi-site feature to switch sites and assign the tag to the user within each site.
{% endhint %}
***
### Using a tag across multiple sites
If the user belongs to multiple sites, one tag can be used for multiple sites. Simply switch sites in the Gallagher SMB app and assign the tag to the user within each site.
If a site belongs to a Credential Group, then a user can have access to any sites within that group by applying privileges, you do not need to scan and allocate the tag for each site within that group.
{% hint style="info" %}
* The user must have the same email address across all sites.
* The same tag cannot be assigned to different users on different sites.
* If a Tag Only user belongs to multiple sites and no email address is provided, they require a separate tag for each site. This is because the system cannot verify the identity of a Tag Only user, as an email address has not been entered.
{% endhint %}
***
### Removing a tag
A Site Manager can remove a tag from a user at any time. When the tag is removed, it can no longer be used on the site. The removed tag can then be assigned to another user.
To remove a tag from a user, perform the following procedure:
1. Navigate to the **My Team** screen within the SMB app.
2. Search for the user and click the downward arrow on their user card for more options.
3. Select the **Credentials** button.
The Credentials screen displays.
4. Select the **Remove** button.
The tag is removed from the user.
{% hint style="warning" %}
If the user belongs to multiple sites, you must remove the tag within each site.
Any changes to a tag that is in a [Credential Group](https://help.security.gallagher.com/smb-installer-portal/site-configuration/site-actions/credentials/credentialgroups) will make the changes for all Sites within that Credential Group e.g. if you disable a tag, the user can no longer use that tag across any sites they have access to.
{% endhint %}
***
### Disabling a tag
If a tag has been misplaced or left in an insecure location, a Site Manager can disable the tag. A disabled tag can no longer be used on the site. When the tag is located, it can be enabled.
To disable a tag, perform the following procedure:
1. Navigate to the **My Team** screen within the SMB app.
2. Search for the user and click the downward arrow on their user card for more options.
3. Select the **Credentials** button.
The Credentials screen displays.
4. Select the **Tag - Active** toggle.
The tag is disabled and can no longer be used on the site. When enabled, the tag can be used again.
{% hint style="warning" %}
If the user belongs to multiple sites, you must disable the tag within each site.
Any changes to a tag that is in a [Credential Group](https://help.security.gallagher.com/smb-installer-portal/site-configuration/site-actions/credentials/credentialgroups) will make the changes for all Sites within that Credential Group e.g. if you disable a tag, the user can no longer use that tag across any sites they have access to.
{% endhint %}
***
### Modifying access
If the Site Manager has an internet connection, they can modify the privileged areas that a Site Admin or Site Member can access at any time. Changes take immediate effect. The Site Manager need not interact with the user or their tag.
Any changes to a tag that is in a [Credential Group](https://help.security.gallagher.com/smb-installer-portal/site-configuration/site-actions/credentials/credentialgroups) will make the changes for all Sites within that Credential Group e.g. if you disable a tag, the user can no longer use that tag across any sites they have access to.
***
### Scanning a tag
A Site Manager can identify a tag's owner by simply scanning the tag at their phone. This is useful when distributing tags to users, searching for a user within the system, or challenging the tag holder.
To scan a tag, perform the following procedure:
1. Navigate to the **My Team** screen within the SMB app.
2. Select the **SCAN TAG** button.
The 'Ready to Scan' pop-up displays.
3. Present an SMB tag to the phone.
If scanning is successful, the tag owner’s name will display with a link to navigate to the user’s details.
If you are a Site Manager for multiple sites, the site name will display below the tag owner’s name. Navigate to that site to modify the user’s details.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://help.security.gallagher.com/smb/smb-app/team/smb-key-tags.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.