| Quick Answer: A lockout/tagout program must define both roles explicitly: authorized employees — who apply locks and perform servicing — need hazardous-energy training, machine-specific procedures, and personal lockout devices, while affected employees — who operate or work around locked equipment — need training on what the locks mean and an absolute prohibition on restarting locked-out equipment. Bowtie Engineering builds programs covering both roles per OSHA 1910.147. Call 866-730-6620 for program help. |
Every hazardous-energy incident report eventually asks the same question: who was authorized, who was affected, and did each know their role? OSHA 1910.147 builds its entire training and responsibility structure on that distinction, yet many written programs mention the terms once and never operationalize them. This article details what a lockout/tagout program should include for authorized versus affected employees — the definitions, the training each requires, the responsibilities that differ, and the program mechanics that keep the roles from blurring on the floor.
Who Is Authorized, Who Is Affected — and Who Is Neither?
- Authorized employees lock out or tag out equipment to perform servicing or maintenance — they apply the devices and do the work
- Affected employees operate the equipment being serviced, or work in the area where servicing happens — they encounter the lockout but never apply it
- Other employees work elsewhere in the facility where energy control procedures may be used — they need only recognize locks and tags and leave them alone
- Roles are task-based, not title-based: an operator who also performs servicing is authorized for that task and needs the full authorized-employee treatment
The task-based point is where programs slip. Facilities that assign roles by job title miss the operator who clears jams — a servicing activity — under an affected-employee training record.
What Must the Program Include for Authorized Employees?
Authorized employees carry the full weight of OSHA 1910.147, and the program must equip them accordingly:
- Training in hazardous energy recognition — types, magnitudes, and sources present
- The machine-specific procedures for every asset they service, at the point of use
- Personally assigned locks and tags — one person, one lock, one key
- Zero-energy verification methods, specified per procedure
- Group lockout and shift-change protocols for multi-person and multi-shift work
- Inclusion in the annual inspection, with retraining when deviations surface
Bowtie Engineering trains authorized employees against the facility’s actual procedures — within its 8-hour NFPA 70E electrical safety training for electrical teams, or as standalone LOTO sessions for broader maintenance populations.
What Must the Program Include for Affected Employees?
Affected-employee requirements are lighter but absolute. The program must ensure they are instructed in the purpose and use of the energy control procedure — what the locks and tags on their equipment mean, why the machine is down, and the one inviolable rule: never attempt to restart, re-energize, or remove devices from locked-out equipment. The program must also guarantee notification — affected employees are told before lockout is applied and after it is removed, so no one is surprised by a dead machine or, far worse, a live one. Notification mechanics deserve explicit procedure language: who notifies, how, and when.
Where Do Programs Most Often Blur the Two Roles?
Four recurring failure patterns. Operators performing minor servicing — jam clearing, blade changes, die setting — under affected-employee status, when those tasks make them authorized. Training rosters built from job titles instead of task analysis. Group lockout situations where “helpers” work under someone else’s lock without their own device. And contractor interfaces where the host’s affected employees never learn what the contractor’s locks mean. Each pattern produces the same audit finding: a person exposed to hazardous energy without the training and devices their actual exposure requires. A program audit catches these role mismatches at the task level — which is where they live.
How Should the Written Program Operationalize the Distinction?
- A roles-and-responsibilities section naming authorized, affected, and other employees explicitly
- A task-based assignment method — servicing tasks mapped to roles, not titles to roles
- Separate, documented training tracks with distinct content and certification for each role
- Notification procedures for lockout application and removal
- Device policy: individually assigned locks for authorized employees, and what affected employees must never touch
- Retraining triggers tied to role changes — promotion to servicing duties means authorized-employee training first
Why Does the Distinction Matter Beyond Compliance?
Because the two roles fail differently, and the program is the firewall between them. Authorized-employee failures are procedural — a missed isolation point, a skipped verification. Affected-employee failures are situational — the operator who restarts a machine to hit a quota, not knowing a mechanic is inside it. The second category produces many of the most severe hazardous-energy incidents, and it is prevented almost entirely by cheap measures: clear training on what locks mean, reliable notification, and a culture where a tag is treated as a person. Programs that invest their affected-employee effort there buy disproportionate safety per training hour.
How Should Contractors Fit Into the Two-Role Structure?
Contractors stress the authorized-versus-affected structure harder than any internal population, because two employers’ programs meet at one machine. The standard’s requirement is coordination: the host and the contractor must inform each other of their respective energy control procedures, and the host must ensure its own employees understand and comply with the contractor’s program restrictions. In practice that means contractor authorized employees lock out under a procedure both parties understand, host affected employees know exactly what the unfamiliar locks mean, and nobody discovers the arrangement for the first time mid-task. The written program should dedicate explicit language to this interface rather than leaving it to the purchase order.
- Exchange written energy control procedures before work begins
- Define whose locks, whose devices, and whose procedures govern each task
- Brief host affected employees on contractor lockouts in their area
- Verify contractor authorized employees are trained to their own program
- Apply group lockout mechanics when host and contractor work together
- Document the coordination — the interface is a recurring citation source
Facilities with heavy contractor traffic should treat this section of the program as living infrastructure, reviewed as vendors change. The failure mode it prevents is specific and severe: an operator restarting equipment because the lock on it belonged to a company whose name they did not recognize.
Frequently Asked Questions
Can the same person be authorized and affected?
Yes, on different tasks. An operator is affected while their machine is serviced by others, and authorized when they perform servicing themselves — and they need authorized-employee training before doing the latter.
Do affected employees need formal training records?
Yes. The employer must ensure and be able to demonstrate that affected employees were instructed in the purpose and use of the procedures — documented instruction, not hallway knowledge.
What is the one rule every affected employee must know?
Never attempt to restart, re-energize, or remove devices from locked-out or tagged-out equipment, under any circumstances. Every other affected-employee requirement supports that rule.
How does group lockout handle multiple authorized employees?
Each authorized employee applies their own personal device — via hasps or group lockboxes — so no one’s protection depends on another person’s lock. The written program must specify the mechanics.
Can Bowtie Engineering build both training tracks?
Yes. Bowtie Engineering delivers authorized-employee training against the facility’s actual procedures and affected-employee instruction as part of complete program development.
Need help now? Call Bowtie Engineering at 866-730-6620 or request a free quote online.
Key Takeaways
- Authorized employees apply locks and service equipment; affected employees operate around it
- Roles are task-based — the operator who clears jams is authorized for that task
- Authorized employees need full training, personal devices, and machine-specific procedures
- Affected employees need documented instruction, notification, and the never-restart rule
- Most role failures hide in minor servicing, group lockout, and contractor interfaces
- Build both tracks into your program — contact Bowtie Engineering