Why not make the user accounts control the lock entiry (for smart locks) via pin codes and allow admins to set an lock/unlock pin code for each user account?
Preferably the same same users could also use the same pin code to arm and disarm an alarm control panel if they have permissions?