About IP Address Restrictions for Roles

	Print Open PDF Version of Online Help

Administering Oracle CRM On Demand > User Management and Access Controls > Role Management > About IP Address Restrictions for Roles

About IP Address Restrictions for Roles

You can specify IP address restrictions at role level. This functionality enables you to restrict access to Oracle CRM On Demand so that users who have a certain role can sign in to Oracle CRM On Demand only from computers that have IP addresses within the ranges that are specified for that role. You can also specify IP address restrictions at company level, for more information, see Restricting Use to IP Addresses. A user is allowed to sign in only if the IP address of the user’s computer is within the ranges specified at role level and at company level.

To allow you to restrict access to Oracle CRM On Demand to specific ranges of IP addresses at company level, role level, or both levels, the IP Address Restrictions Enabled check box on the company profile must be selected. If this check box is not already selected, then contact Oracle CRM On Demand Customer Care and ask them to select the check box.

You can restrict access to specific ranges of IP addresses at role level even if you do not restrict access to specific ranges of IP addresses at company level. However, if you restrict access to specific ranges of IP addresses at both company level and role level, then the ranges of IP addresses that you allow for a user role must fall within the ranges of the IP addresses that you allow at company level. If you restrict access for a user role, then users who have that role can sign in to Oracle CRM On Demand only if the IP addresses of their computers are within the ranges of IP addresses that are allowed for the user role and are also within the ranges of IP addresses that are allowed at company level.

The following table shows an example of how the IP address restrictions at company level work with the IP address restrictions at role level. In all cases shown in this table, the IP Address Restrictions Enabled check box on the company profile is selected, and no IP address restrictions are specified in any role other than the Field Sales Rep role.

Allowed IP Addresses at Company Level	Allowed IP Addresses for Field Sales Rep Role	IP Addresses Allowed for Users	Notes
No IP addresses specified	203.0.113.254	IP address 203.0.113.254 is allowed for users who have the Field Sales Rep role. Any IP address is allowed for users who do not have the Field Sales Rep role.	None.
198.51.100.1 through 198.51.100.254	No IP addresses specified	IP addresses 198.51.100.1 through 198.51.100.254 are allowed for all users.	None.
198.51.100.1 through 198.51.100.254	203.0.113.254	No IP addresses are allowed for users who have the Field Sales Rep role. IP addresses 198.51.100.1 through 198.51.100.254 are allowed for users who do not have the Field Sales Rep role.	The IP address 203.0.113.254 is not within the range of addresses allowed at company level.
192.0.2.1 through 192.0.2.254	192.0.2.1.50	IP address 192.0.2.1.50 is allowed for users who have the Field Sales Rep role. IP addresses 192.0.2.1 through 192.0.2.254 are allowed for users who do not have the Field Sales Rep role.	The IP address 192.0.2.1.50 is within the range of addresses allowed at company level.
No IP addresses specified	No IP addresses specified	All users including users who have the Field Sales Rep role can access Oracle CRM On Demand from any IP address.	None.

For information on restricting access to Oracle CRM On Demand to specific ranges of IP addresses at role level, see Adding Roles.


Published 7/3/2018	Copyright © 2005, 2018, Oracle. All rights reserved. Legal Notices.