Skip to main content

Restrict access to the account

By default, access to the account is allowed from all IP addresses. The Account Owner and users with the iam.admin role can restrict access to the account — users will only be able to log in to the account from IP addresses and subnets that the Account Owner or iam.admin added to the allowlist.

The access restriction applies to logging in through the control panel.

Add an address to the authorized list

For your information

The Account Owner and a control panel user with the iam.admin role can add an address to the allowlist.

Before adding an IP address, make sure that the IP address is static. You can check the address type with your provider.

  1. In the control panel, in the top menu, click IAM.

  2. Go to the ACL section.

  3. Click Add addresses.

  4. To maintain access to your account, add your current IP address first.

  5. Click Add another address.

  6. Enter the address. You can add:

    • an IPv4 address;
    • an IPv6 address;
    • a subnet in the 198.51.100.0/29 format.

  7. Optional: enter a comment. For example, specify who owns the specified IP address or subnet. The maximum comment length is 256 characters.

  8. Click Add. Sessions from addresses not included in the list will be terminated, and access to the account from them will be denied.

Remove an address from the allowlist

For your information

The Account Owner and a control panel user with the iam.admin role can remove an address from the allowlist.

You can remove one address or all addresses from which access to the account is allowed. When removing all addresses, all restrictions will be lifted — users will have access to the account from any address.

  1. In the control panel, in the top menu, click IAM.
  2. Go to the ACL section.
  3. From the address menu, select Delete.
  4. To confirm the deletion, enter the address.
  5. Click Delete.