| Print Open PDF Version of Online Help

#### About IP Address Restrictions for Roles You can specify IP address restrictions at role level. This functionality enables you to restrict access to Oracle CRM On Demand so that users who have a certain role can sign in to Oracle CRM On Demand only from computers that have IP addresses within the ranges that are specified for that role. You can also specify IP address restrictions at company level, for more information, see Restricting Use to IP Addresses. A user is allowed to sign in only if the IP address of the user’s computer is within the ranges specified at role level and at company level. To allow you to restrict access to Oracle CRM On Demand to specific ranges of IP addresses at company level, role level, or both levels, the IP Address Restrictions Enabled check box on the company profile must be selected. If this check box is not already selected, then contact Oracle CRM On Demand Customer Care and ask them to select the check box. You can restrict access to specific ranges of IP addresses at role level even if you do not restrict access to specific ranges of IP addresses at company level. However, if you restrict access to specific ranges of IP addresses at both company level and role level, then the ranges of IP addresses that you allow for a user role must fall within the ranges of the IP addresses that you allow at company level. If you restrict access for a user role, then users who have that role can sign in to Oracle CRM On Demand only if the IP addresses of their computers are within the ranges of IP addresses that are allowed for the user role and are also within the ranges of IP addresses that are allowed at company level. The following table shows an example of how the IP address restrictions at company level work with the IP address restrictions at role level. In all cases shown in this table, the IP Address Restrictions Enabled check box on the company profile is selected, and no IP address restrictions are specified in any role other than the Field Sales Rep role.
Allowed IP Addresses at Company Level | Allowed IP Addresses for Field Sales Rep Role | IP Addresses Allowed for Users | Notes
--- | --- | --- | ---
No IP addresses specified | 203.0.113.254 | IP address 203.0.113.254 is allowed for users who have the Field Sales Rep role. Any IP address is allowed for users who do not have the Field Sales Rep role. | None.
198.51.100.1 through 198.51.100.254 | No IP addresses specified | IP addresses 198.51.100.1 through 198.51.100.254 are allowed for all users. | None.
198.51.100.1 through 198.51.100.254 | 203.0.113.254 | No IP addresses are allowed for users who have the Field Sales Rep role. IP addresses 198.51.100.1 through 198.51.100.254 are allowed for users who do not have the Field Sales Rep role. | The IP address 203.0.113.254 is not within the range of addresses allowed at company level.
192.0.2.1 through 192.0.2.254 | 192.0.2.1.50 | IP address 192.0.2.1.50 is allowed for users who have the Field Sales Rep role. IP addresses 192.0.2.1 through 192.0.2.254 are allowed for users who do not have the Field Sales Rep role. | The IP address 192.0.2.1.50 is within the range of addresses allowed at company level.
No IP addresses specified | No IP addresses specified | All users including users who have the Field Sales Rep role can access Oracle CRM On Demand from any IP address. | None.
For information on restricting access to Oracle CRM On Demand to specific ranges of IP addresses at role level, see Adding Roles.

Published 5/23/2022 | Copyright © 2005, 2022, Oracle and/or its affiliates. Legal Notices.