IP Allowlist
Restrict switching to requests from specific IP addresses.
Go to SwitchUser → Advanced → Advanced Security → IP Allowlist.
Settings
| Setting | Default | Description |
|---|---|---|
| IP Allowlist | Empty | IP addresses allowed to switch, separated by commas or new lines. Leave empty to allow all IPs |
Behaviour
- When the list has entries, switching is only possible from a listed IP address or from inside a listed range.
- From any other IP, Switch To links don't appear and switch attempts are refused.
- Switching back always works, so nobody gets stuck in a customer's account.
Accepted Format
Enter single addresses or CIDR ranges, IPv4 or IPv6:
| Entry | Allows |
|---|---|
203.0.113.10 | That one address |
203.0.113.0/24 | 203.0.113.0 - 203.0.113.255 |
10.0.0.0/8 | Every 10.x.x.x address |
2001:db8::/32 | An IPv6 range |
⚠️
If your office IP changes, you won't be able to switch until you update the list. If you're locked out, edit the ip_allowlist key of the switchuser_settings option in the database, or clear the field from another allowed IP.