Tenant owners can configure an IP allowlist to restrict access to the tenant to registered addresses only.
❗️Important
This can be configured at https://<your-tenant>.tines.com/admin/ip_access_control
Rules must specify an address or CIDR range and a description. Both IPv4 and IPv6 addresses are supported. The format for CIDR ranges is address/mask .
Rules can also be fetched and modified via the Tines API.
⚠️Warning
Mode of operation
There are two modes of operation available:
Tenant and API: enforce access control on the tenant UI and API access. That is, on all endpoints that require user authentication (except SSO-protected pages).
Everything: enforce access control on the tenant UI, API access, all webhooks and public pages. That is, on private and public tenant endpoints. Please note this rule is global and applies to all resources.
In both modes of operation, requests coming from within the tenant itself (e.g. an HTTP Request Action calling the Tines API) are always allowed.