Go to Settings in Adobe Admin Console.
Last updated on
Oct 15, 2026
Control who can access Adobe products and how long their sessions last by restricting sign-ins to trusted IP addresses.
IP-based access control enhances security by allowing access to Adobe products, business profiles, and profile switching only from approved IP addresses.
Use it to restrict access to specified office networks, VPNs, or secure locations across all directories and products in Admin Console. Only users connecting from IP addresses on the allowed list can access their account profiles. If users need unrestricted access from any location, leave this setting unconfigured.
Before configuring restrictions, identify your organization's public-facing IP addresses or CIDR blocks.
Before you begin
Ensure you have the following before you start configuring IP-based access controls:
- System Administrator role in Adobe Admin Console
- Public IP addresses or CIDR blocks for your approved networks
- Your own current public IP address (required for first entry)
Add IP addresses to the allowlist
Expand Privacy and security in the navigation menu and select Authentication settings.
Navigate to IP-based Access and turn on Enforce IP-based Restrictions to apply IP-based access controls across your organization.
If your current IP address isn't included in an active rule, you'll see a warning that proceeding could lock you out. To maintain access, add your IP address to the allow list before continuing.
Select Add IP address or CIDR range, then enter a new IP address or CIDR range and an optional label.
Select Add. The new IP address or CIDR range is added to your organization’s IP based access list.
IP restrictions take effect within minutes. Users outside the allowed IP ranges will be blocked the next time they attempt to sign in or switch profiles. Adobe recommends that you inform your users in advance of this change.
You can add up to 150 different IPv4 public IP ranges (for example, 192.168.1.1 or 10.0.0.0/24). To modify or remove entries, select the edit or delete icon next to any listed address.
For CIDR ranges only, the suffix must be /22 or more specific (e.g. /24, /32).
Alert
Always add your own public IP address as the first entry. If you accidentally lock yourself out of Admin Console, contact Adobe Customer Care.
Activate and manage rules
Each IP address or range is a rule that's either active or inactive. IP filtering applies only to active rules, and only while the enforcement toggle at the top of the section is on.
To turn on filtering for a rule, select it and set it to active from the options menu. Select multiple rules to activate them in bulk.
To stop enforcing an active rule for an IP address, select the IP address and set it to inactive from the options menu.
To change a rule's label, edit it while active or inactive. To change its IP range, set the rule to inactive first. Adobe flags invalid entries, such as an incorrect CIDR mask.
To delete a rule, set it to inactive, then delete it.
To suspend all IP-based restrictions without deleting your rules, turn off the Enforce IP-based Restrictions toggle. Turn it back on to resume enforcement.
Caution
If you activate rules that don't include your current public IP address, the console notifies you to mandatorily add your IP address to the list. If you don't, you may lose access.. Select Continue to proceed. You're not signed out immediately, so you have time to add a rule that covers your IP. To stay covered, add your public IP as an active rule.
Test an IP address
Check whether an IP address or range is already covered by your IP/CIDR allow list.
In the IP-based access section, select Test IP address.
Enter the IP address or CIDR range you want to check, then select Test.
The result shows whether the IP is in the allow list, whether it's active, and the date it was last modified.
Filter, export, and audit changes
Use these tools to review and track your allow list:
- Filter the table to find specific rules.
- Select Export to CSV to download the allow list as a CSV file.
- Select View logs to open the audit logs, which show what changed and which administrator made each change.
Note
Only public IP addresses are restricted. Private IP addresses are not affected. If you use a secured web gateway, route all traffic through it and confirm that required Adobe domains are allowed.
