Skip to main content

IP Restriction and Approved Network Ranges

Overview of how to set IP restrictions and add network ranges in Security.

Written by Jozlyn Miller

Can't log in to the dashboard?

If your business has IP restriction enabled, staff can only access Boulevard from approved network ranges (like your business's WiFi). If you're being blocked while working from home, on mobile data, or on a different network, check with an Admin at your business. They can confirm whether IP restriction is enabled and add approved networks if needed.

Overview

Access to Boulevard on both the web dashboard and the mobile app can be restricted to pre-approved networks. Setting this up has two parts:

  1. Define your approved network ranges in Manage location > Security

  2. Choose which permission groups are restricted to those networks in Manage business > Permission groups

Staff in a restricted permission group will only be able to log in from the approved network ranges you've defined. Staff in unrestricted groups can log in from anywhere.

Adding approved IP addresses

  1. Head to Manage location > Security, and click Add IP address

  2. Name the network range (e.g., "Front Desk WiFi" or "Main Street Location")

  3. Click Your current IP address to auto-fill in the current IP, or add an IP range manually

  4. Click Add

  5. The network range appears in the list. Repeat for all network ranges that should be in use

šŸ’” Heads up about changing IP addresses: Many business internet plans use dynamic IP addresses, which can change periodically. If staff are suddenly blocked from a previously approved network, the IP address may have changed — update the approved range in Manage location > Security. If this happens frequently, ask your internet provider about a static IP address.

Restricting Access to only approved IP addresses

IP restriction is controlled by a single permission in Permission group setup > Staff: "Access login from any IP address."

  • Checked (enabled): Staff in this group can log in from anywhere

  • Unchecked (disabled): Staff in this group can only log in from the approved IP addresses configured in Manage location > Security

In other words, leaving this box checked means IP restriction does not apply to that group. To restrict a group, you'll uncheck it.

To restrict staff logins to approved IPs for a specific Permission group:

  1. Go to Manage business > Permission groups

  2. Create a new permission group or edit an existing one

  3. Navigate to the Staff section and uncheck "Access login from any IP address."

  4. Save the permission group. Staff in this group will now only be able to log in from the approved IP addresses you have defined in Manage location > Security

What staff will see if they're blocked?

Staff attempting to log in from a non-approved network will be unable to access the dashboard. If a team member reports being blocked:

  • Confirm which network they're on. Home WiFi, mobile data/hotspots, and public networks won't work unless they've been added as approved ranges.

  • Check their permission group. Only groups with "Access login from any IP address" unchecked are restricted.

  • Verify the approved IP is current. If your network's IP address has changed, update it in Manage location > Security.

Did this answer your question?