IP Restrictions let an Administrator allow sign-in only from listed IP addresses or ranges, such as the office network or the company VPN; every other address is refused. The setting is on the Enterprise and Signature plans, in the Security tab of Workspace Administration.
Your own address must be on the list before you can turn it on. That keeps you from locking yourself out.
Example: a compliance team on Enterprise must show auditors that its GRC data is reachable only from the corporate network. Its Administrator adds the office and VPN ranges and turns on IP Restrictions.
Plan Availability | Enterprise and Signature. |
Permissions | Administrators configure IP Restrictions. The rule applies to every member, the mobile app, and shared views and forms. |
Platform | Web |
Related Reading |
How IP Restrictions work
When a member signs in, SmartSuite compares their IP address with the allowlist. A matching address gets in. Any other address is refused, and the member cannot sign in.
Setting up IP Restrictions
Sign in as an Administrator.
Select your profile icon in the upper-right corner, then Workspace Administration.
Select Access under Security, then select Edit in the IP Address Restriction row.
Under IP whitelist, enter a description and an address or range for each network, and select Add. You can add IPv4 and IPv6 addresses. Write one address as 192.168.1.1 and a range in CIDR notation as 192.168.1.0/24.
Include your current IP address. SmartSuite does not let you turn the restriction on without it.
Turn on Enable IP Address Restriction, then select Save. The restriction applies at once.
The IP Address Restriction window under Security > Access, with the Enable IP Address Restriction toggle and the IP whitelist, where each address gets a description.
Warning: Changes save as soon as you add or remove an address. Review the list when your networks change, so nobody is locked out.
What else the restriction covers
Automations keep running with no extra setup.
Third-party integrations need their IP addresses on the allowlist to keep working.
The mobile app is restricted too, so the addresses your devices use must be on the list.
Shared views and shared forms open only from allowed addresses.
Frequently asked questions
How does this affect my automations and integrations?
How does this affect my automations and integrations?
SmartSuite automations keep working with no change. Third-party integrations must have their IP addresses on the allowlist to keep working.
Can I still use the mobile app?
Can I still use the mobile app?
Yes, when the IP addresses of your mobile devices are on the allowlist. The restriction applies in the mobile app as well.
Can shared views or forms be opened outside the allowed addresses?
Can shared views or forms be opened outside the allowed addresses?
No. Shared views and forms are covered by the restriction and open only from the listed addresses and ranges.
Which plans include IP Restrictions?
Which plans include IP Restrictions?
IP Restrictions are available on the Enterprise and Signature plans. They are set in the Security tab of Workspace Administration.
Need more help? Ask the SmartSuite Community, where builders, administrators and the SmartSuite team answer questions about building on SmartSuite. For your account, billing or data, select the chat button in the lower-right corner of SmartSuite to reach support.
Last verified 1 Nov 2026.