Organization Admins can restrict access to every project in their organization by IP address and country, from one page. A rule set at the organization level applies to all projects in the organization, so you don't have to set the same locations on each project. Before this change, location restrictions could be set only project by project, which made it easy for a project to go unrestricted if its settings were missed.
Requirements
Organization Admins set these restrictions. Project Admins can view the organization rules that apply to their projects in Project Settings but can't change them.
Edit IP and country restrictions at the Organization level
The organization page uses the same two lists: Allowed IP addresses and Allowed countries. To edit these lists:
- Go to Organization home > Projects and users > Approved Locations.
- Select Edit.
- Add IP addresses to the Allowed IP addresses list, add countries to the Allowed countries list, or do both.
- Select Save to save your changes.
Note: Users can access their projects if their IP address is on the allowed list or if they log in from an allowed country. If you add both, a user needs to match only one.
Admin access
Additional settings can be found in the Admin access section of the organization’s Approved locations page.
Allow log in from anywhere
To allow Organization Admins to log in from anywhere, switch on Allow organization admins to log in from anywhere. This is disabled by default.
Project level permissions
You can also choose whether projects can keep their own IP allowlist in addition to the organization list. This setting is on by default. If you turn it off, projects can't set their own allow lists. To learn more about project level approved locations, visit Project-level Approved Locations.