Admin Console - How To Enable Export Restrictions in Your Program Admin Console Using Safelisted IP Addresses

Introduction

This article provides information on finding the export restriction feature and navigating the export restriction options. Additionally, it shows how to safelist IP addresses and where export restrictions can be applied. This information can be useful to members and clients globally.

Overview

Some clients require strict control over who can export member data from their program’s admin console and from which IP locations these exports are allowed. To support this level of security, we’ve developed the Export Restriction feature. This functionality allows clients to enforce IP-based restrictions on all export actions within the portal, ensuring that program administrators with export rights can download member-related data only when accessing the portal from safe listed IP addresses, such as a corporate network. 

Where To Find the Export Restriction Feature

First, go to Home > Security: Basic settings.

Then, navigate to the Security section from the left-hand side navigation menu in your program’s admin console. Then, open the Basic Settings tab.

Export Restriction Options

The Export Restriction field contains three drop-down options: 

1. Allow all exports - This option allows platform administrators with export rights to perform exports with no IP restrictions. 
2. Allow exports on safe list IPS - This option allows platform administrators with export rights to perform exports only from IP addresses that have been added to the safe list.  
3. Do not allow exports - This option prevents administrators from performing any exports across the program.

How To Safelist IP Addresses 

If you want exports to work only from approved IP addresses:

1. Select Allow exports on safe list IPs from the drop-down field
2. Click the Add an IP Address to the safelist button
3. Provide:

a) An IP address or an IP range, and a Subnet mask  

b) A description to help identify the owner or purpose of that IP entry

4. Click Add to save your changes

Where Export Restrictions Are Applied

Export restrictions apply program-wide to all admin users who have export permissions. Currently, this includes exports from: 

• R-Reports
• MI-Reports (Management Information reports)
• Member Exports

Please note that the export restriction feature does not apply to audit log exports – administrators can still export audit logs regardless of the IP address they use.