When managing organization settings, the Allowed IP Addresses section enables you to limit access to your Genesys Cloud account to only those users visiting from a specified IP address.

1. Click Menu > Account > Organization Settings.
2. Click the Settings tab.
3. In the IP Addresses box, enter the list of CIDR (Classless Inter-Domain Routing) blocks you would like to allow. You can enter one CIDR per line (for example 192.168.100.0/22) up to a maximum of 150 CIDRs.
   When creating or updating an allowlist, ensure that your IP is added to or already in the allowlist.
   
   Notes:

   • You can convert IP addresses using this CIDR Utility Tool. If you do not enter anything in the Allowed IP Addresses field, all IP addresses can access your Genesys Cloud account.
   • If you incorrectly enter a formatted CIDR, the system disables the Save button until you correct the format. Genesys Cloud checks to ensure that the IP address of the user who configures the allowlist appears in one of the CIDR entries.
   • If you want to grant access to users or groups from other Genesys Cloud organizations (authorized organizations), then include their CIDRs in the Allowed IP Addresses list.
   • The Allowed IP Addresses list also applies to applications that interface with Genesys Cloud using its API.
   • IP addresses originating from a Genesys Cloud Data Actions integration are automatically allowed and do not have to be explicitly added to the allowlist.
   • If you use Genesys resources other than Data Actions Integrations, make sure to include the necessary IP address ranges listed here among your allowed IP addresses.
   • Only IPv4 addresses are supported.
   • If you had configured ABAC policies to restrict users from accessing Genesys Cloud from specific IP ranges, you can skip configuring the Allowed IP Address list. If you had configured Allowed IP Address, the IP list restricted through ABAC policies will act as a subset to the allowed IP address list.
   • You can use both Allowed IP Address and ABAC Global Policies, but note that the IP list that is configured in the Allowed IP Address feature takes precedence and is evaluated first. Therefore, the IP address list configured in ABAC policy must be a subset of the Allowed IP Address list.
   • Though the Allowed IP Address and ABAC Global Policies feature complements each other, Genesys recommends using one or other of these features for configuration simplicity, but not both.
   • You do not have to add WebRTC Media Helper to the list of allowed IP addresses. WebRTC Media Helper is allowed by default. This enables WebRTC Media Helper to be used in VDI environments when the WebRTC Media Helper IP address is outside the VDI environment’s Allowed IP Address range.
   • You do not have to add Genesys Tempo to the list of allowed IP addresses. Genesys Tempo is allowed by default. As a result, Tempo access requests are allowed, while requests from other apps (such as mobile browsers) are blocked. This behavior enables users to remain productive and also meets security requirements.
4. Click Save.