IP allow-listing lets users define the IP addresses allowed to access a workspace in Synerise. Next to [two factor authentication](/docs/settings/identity-access-management/access-control/two-factor-authentication) and [password policy](/docs/settings/identity-access-management/access-control/password-settings), it's an option that strengthens security of the workspace and restricts the access to those users whose credentials are executed from the approved location.  

Within this option, the users can define:
1. The list of allowed IP addresses
2. Access to a workspace for Synerise subnets

<figure>
<img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/docs/settings/_gfx/ip-allow-list.png" alt="Configuration of IP allow-listing" class="full" >
<figcaption> Configuration of IP allow-listing </figcaption>
</figure>

1. Go to <img src="/api/docs/image/54176ad07f146575310749eba44b7c2f42c1b327/icons/settings-icon.svg" alt="Settings icon" class="icon" > **Settings > Access Control**.
2. In the **Security** section, next to **IP allow-listing**, click **Show**.
3. In **Give access to selected IP addresses** section, the **Allow selected IP** toggle is off by default (users can access a workspace from various IP addresses). To define the list of IP addresses only from which users can access the workspace, switch the toggle on.  
**Result**: A text field appears.
4. In the text field enter an IP address. 
5. Confirm by clicking **Add address**. 
6. To add more addresses, repeat steps 4 and 5. 
7. Optionally, you can manage access to your workspace by Synerise subnets for support reasons. This option is on by default.
    
   <div class="admonition admonition-warning"><div class="admonition-icon"><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2.5"><path stroke-linecap="round" stroke-linejoin="round" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L4.082 16.5c-.77.833.192 2.5 1.732 2.5z" /></svg></div><div class="admonition-body"><div class="admonition-content">

   Remember that after confirming the list of allowed IP addresses, the users who access the workspace from other addresses than specified will lose access.

   </div></div></div>

8. To confirm all settings, click **Apply**.