A physical location access control system is configured to receive. via a network interface, a request to provide a temporary access right for a first physical location to a first user, the request providing an indication as to a first time period associated with the temporary access right. In response to determining that the requester has an access right to the first physical location for a second time period that comprises the first time period, a temporary access token corresponding to the first time period is created and the requester's access right to access the first physical location for the first time period is disabled. The temporary access token is transmitted to a device associated with the first user, enabling the first user to access the first physical location during the first time period.