Smart Thermostat Permission Settings

Most hosts only learn about smart thermostat permission settings the second time a guest scrambles their schedule. The first time you blame the guest. The second time you realize there is a setting that would have prevented it — you just never turned it on.

Permissions are the layer between “the guest can change anything they can see on the touchscreen” and “the guest can adjust temperature within a safe range and nothing else.” Configured well, they save you from rewritten schedules, accidental Off mode in winter, vacation holds set for next March, and the slow drift that wrecks Nest’s learning over a season. This guide walks through what permissions actually exist on each major brand, what to enable, what to leave open, and how to test it before the next guest checks in. If you have already had damage and need to recover first, start with how to undo guest thermostat changes and come back here for the lock-down.

Who needs this

You run at least one short-term rental with a smart thermostat — Ecobee Premium, Ecobee Smart Thermostat, Nest Learning Thermostat, Honeywell T9 / Lyric, or Sensi Touch — and you have not yet locked down the touchscreen or the manufacturer app for guests. Maybe you assumed your house manual would be enough. Maybe you only just had a guest mess things up. Either way, you want a partial-lock setup that keeps comfort accessible but blocks dangerous changes. The general triage flow when something is wrong sits in the Airbnb thermostat troubleshooting hub; this page is the prevention chapter.

What permissions actually exist

Across the major thermostat brands, the controls fall into roughly six buckets:

Setpoint adjustment — the up/down arrows. Always leave this on for guests, but inside a range.
Mode change — switching between Heat, Cool, Auto, Off, Emergency Heat. Lock this. A guest hitting Off in winter can freeze pipes.
Schedule edit — creating, deleting, or modifying scheduled periods. Always lock.
Hold or Vacation — setting indefinite or future-dated holds. Lock; you do not want a guest to schedule Vacation through 2027.
Fan control — switching fan to Always On vs Auto. Lock or guests will leave the fan running 24/7 without realizing the cost.
Settings menu access — Wi-Fi credentials, account info, sensor pairing. Always lock; this is the nuclear option for damage.

The pattern: lock everything that controls the system itself, leave open everything that adjusts comfort within sensible limits. If a guest does manage to push outside the lock, the symptoms will look like the ones in why a thermostat keeps changing temperature — that page is your tell that the lock has slipped.

Setting permissions on Ecobee

Open the Ecobee app, tap your thermostat, then Settings.
Scroll to Access Control. Tap Restrict Access and create a 4-digit PIN.
Choose what to lock. Recommended: Adjust Schedule, Vacation, Wi-Fi, Reminders & Alerts, Quick Save. Leave Adjust Temperature open.
Go to Preferences → Heat/Cool Limits. Set Heat Max to 75 (or your max), Cool Min to 65 (or your min). Setpoint adjustments outside this clip silently.
Disable Smart Home/Away on rental units — it gets confused by guest patterns.
Test by walking up to the thermostat and trying to edit the schedule. It should prompt for your PIN.

The full configuration recipe — comfort profiles, vacation mode, emergency-heat lockout — lives in the Ecobee vacation rental settings guide. Run that one first if you have not configured the device beyond default.

Setting permissions on Nest

Open the Google Home app, tap the Nest thermostat tile, then the gear icon.
Tap Lock and set a 4-digit passcode.
Define the temperature range guests can adjust within (e.g. 65 – 78). Outside this range requires the PIN.
Settings → Auto-Schedule → Off. Auto-Schedule learns guest behavior on rental units, which is the opposite of what you want.
Set Eco Temperatures (Settings → Eco) to your between-guest range — 60 to 80 is reasonable.
Test by trying to change to Off mode at the device — should prompt for PIN.

If your Nest is also drifting between stays, work through why a Nest stops following the schedule you set before you trust the lock alone — Eco Mode and Auto-Schedule both fight a locked range in subtle ways.

Setting permissions on Honeywell T9 / Lyric

Open the Resideo (Honeywell Home) app, tap the thermostat, then Settings.
Find Screen Lock. Choose Partial Lock. Set a passcode.
Partial allows setpoint adjustment but blocks schedule, mode, and menu access.
Set heating and cooling limits in Preferences. T9 supports min/max constraints similar to Ecobee.
Disable Adaptive Recovery on rentals — it pre-runs the system based on a learned schedule that guest behavior corrupts.

Setting permissions on Sensi Touch

In the Sensi app, tap the thermostat → Settings → Lock Screen.
Choose Adjust Only mode. Set a 4-digit PIN.
Adjust Only allows the up/down arrows; everything else requires the PIN.
Set comfort range limits via the schedule itself.

Permissions for the voice layer

Smart thermostat permission settings are not just on the device. The voice assistant adds another layer. By default, Alexa or Google Home will accept any thermostat command from any voice in the room. Lock this down too:

Alexa: in the Alexa app → Settings → Device Settings → the Echo Dot in the unit → Voice Purchasing OFF, Communication restrictions ON. This stops a guest from accidentally ordering on your account.
Per-device limit: in the thermostat’s entry in Alexa’s Devices list, you can set a min/max temperature. Voice commands outside it get clipped.
Google Home: Household settings → Guest mode controls what a non-household voice can do.

If voice fails after you tighten these, do not assume the lock is too tight — nine times out of ten the OAuth token between Alexa and the thermostat cloud has expired. The fix is in the Alexa thermostat command troubleshooting steps.

What to write in your house manual

Permissions only work if guests know what they can and cannot do. A short paragraph in the welcome message:

“The thermostat is set to keep you comfortable between 65 and 78 degrees. Use the up/down arrows or just say ‘Alexa, set the thermostat to 71.’ The schedule and mode buttons are locked — if you need a wider range or anything feels off, message me and I will adjust on my end in 30 seconds.”

Common pitfalls

Setting the lock PIN to 1234 or your unit number — guests will guess. Use something only you know.
Locking too tight — a fully locked thermostat where guests cannot adjust anything generates more support requests than it prevents. If a guest texts you mid-stay that they think the screen is broken, the explanation in why an Airbnb thermostat appears locked is the message to copy/paste back.
Forgetting your PIN — store it in your password manager along with the thermostat’s serial number and Wi-Fi MAC.
Locking the touchscreen but leaving the manufacturer app account password weak — if a guest finds your tablet or computer, they can still get in.
Not testing after every firmware update — permissions occasionally reset. The smart thermostat checklist for hosts includes a quick PIN verification step.

Privacy note

Smart thermostats with motion or occupancy sensors (Ecobee SmartSensor, Nest with Home/Away) generate presence data. That is fine for energy automation but disclose it. Add a line to your listing: “The thermostat uses room sensors to detect occupancy for energy efficiency.” Do not use the data for any other purpose. No indoor cameras or microphones — thermostat motion sensors are the limit. The privacy-safe property monitoring guide shows how to disclose presence-based automation without crossing into surveillance.

FAQ

Can I set different smart thermostat permission settings for different times?

Not natively on most brands. The lock state is constant. Workaround: use a hub like SmartThings or Home Assistant to flip permissions or limits when your booking calendar changes. For most hosts, a single locked-down configuration that works for any guest is simpler and reliable enough.

Will my guest get a permissions popup?

If they tap a locked function on the touchscreen, yes — they get a PIN prompt. If they just press up or down arrows for setpoint, nothing pops up. Voice commands outside your set range either silently clip or Alexa says “the thermostat does not support that command.” Set expectations in your house manual so it does not feel adversarial.

Should I lock the thermostat before installation or after?

After. Get the device fully working, schedule built, voice assistant integrated, and tested. Then layer permissions on top. If you lock first, troubleshooting installation problems and intermittent offline thermostat issues becomes much harder — you will be typing your PIN every time you want to check Wi-Fi.

What if my Ecobee firmware updates and resets the lock?

It is rare but happens. Schedule a quarterly check — open Access Control on each device and confirm Restrict Access is still on with your PIN. Same for Nest and Honeywell. A 60-second audit prevents an unlocked thermostat going into the next booking.

Save the troubleshooting checklist

Permissions plus a clear house manual is the combination that ends most thermostat drama. Pair the lock with a stable network using the Airbnb Wi-Fi reliability checklist, then browse the rest of the smart thermostats and energy pillar for the wiring, sensor, and energy-savings deep dives. Get this configured once per property and the only message you ever get about the thermostat is “works great, thanks!”