IP Access Control

IP Access Control is used to deny specific users or API calls from accessing resources in a group. This is done by applying rules based on IPv4 or IPv6 addresses, similar to configuring access lists on a router.

IP Access control would typically be implemented if you want to prevent all users or specific users from accessing documents outside of their assigned place of work.

IP Access Control is accessed from the admin page using Admin ---> IP Access Control:

Click Add New Rule to configure a restriction:

Choose a rule for specific users or for API Keys. For specific users, there are two rules to follow:

• The user must be assigned to the group (Users that are not assigned to the group, by default, do not have access)
• Administrators cannot be restricted. If you have a user that is an administrator but you want to restrict their access, you must first change them to be a general user in the group. Users can be administrators in one group and general users in others.

First, create the deny all IP Address rules for the user for all IPv4 addresses. You can select all IP address or specific IP addresses. Similarly, you can all users or specific users.

Save the rule, then add a similar rule for IPv6. Finally, add an allow rule. Once all three are saved, it will look similar to this:

If the user attempts to access the workflow, all links in the workflow are removed and they will receive this message:

Or this message depending on the menu page they are on:

Restrictions for API keys are applied in the same manner as those rules for a user. In this example, the group has two API keys:

If an API key that is denied access is used, the API response will be: