Access Restrictions allow you to secure your account by limiting who can log in based on specific criteria. Once enabled, only users who meet the defined rules will be able to access and manage this account.
You can restrict access using the following methods:
- Multi-Factor Authentication MFA
- IP Access Restrictions : Allow only specific IP addresses to log in.
- Country Access Restrictions : Allow only users from specific countries
- Domain Access Restrictions : Allow only users from specific email domains.
To open these settings, click Settings at the bottom of the menu on the left, then Security.
Note: Only one restriction type (IP, Country or Domain) can be on at a time. New settings can take up to 10 minutes to apply. On the free plan these settings are shown but cannot be changed: the CMS asks you to move to the Premium plan.
Multi-Factor Authentication MFA
Require MFA allows you to force all sub-users of this account to secure their sign-in with two-factor authentication.
Enable this feature by checking the “Require MFA for all sub-users” box.
Sub-users without 2FA will be blocked until they complete the setup.
IP Access Restrictions
IP Access Restrictions allow you to secure your account by limiting access to specific IP addresses only. Once enabled, only the IPs added to the list will be able to log in and manage this account.
Any login attempt from an IP address that is not listed will be blocked.
- Go to Settings > Security
- Locate the IP Access Restrictions section
- Check the IP Access Restrictions checkbox to enable the feature
Adding Allowed IP Addresses
- Enter an IP address in the input field
- Press Enter to add the IP
- Add IPs one by one
- You can add up to 5 IP addresses
- Each added IP will appear as a tag inside the field
Add My IP
- Click Add my IP to add the public IP address you are using now. The button shows the address it will add
- This is recommended before enabling IP restrictions to avoid locking yourself out
Notes & Best Practices
- Add each address exactly as Add my IP shows it. It can be an IPv4 or an IPv6 address
- Make sure to add all required IPs (office networks, VPNs, admin users) before enabling the restriction
- If your internet provider uses dynamic IP addresses, you may need to update the list when your IP changes
- IP Access Restrictions apply to account access via the CMS
- Screen playback, content delivery, and player communication are not affected
Important
If IP Access Restrictions are enabled and your current IP address is not included in the allowed list, you will be logged out and denied access.
Always ensure at least one trusted IP address is added before saving changes.
Country Access Restrictions
Country Access Restrictions allow you to secure your account by limiting access to specific countries only. Once enabled, only users from the countries added to the list will be able to log in and manage this account.
Any login attempt from a country that is not listed will be blocked.
- Check the Country Access Restrictions checkbox to enable the feature.
- Search for a country by name or country code, and add it to the allowed list
Important
Note that if no countries are added after checking the box, all countries will be blocked and no access to this account will be enabled. Make sure to add at least one country (including the user’s country) to allow access or disable restriction.
Domain Access Restrictions
Domain Access Restrictions allow you to secure your account by limiting access to users with specific email domains only. Once enabled, only users whose email address belongs to an allowed domain will be able to log in and manage this account.
Any login attempt from a user whose email domain is not listed will be blocked.
- Go to Settings > Security
- Locate the Domain Access Restrictions section
- Check the Domain Access Restrictions checkbox to enable the feature
Adding Allowed Domains
- Enter a domain (e.g.
example.com) in the input field - Press Enter to add the domain
- Add domains one by one
- You can add up to 5 domains
- Each added domain will appear as a tag inside the field
- Click Add my domain to add the domain of the email you signed in with
Notes & Best Practices
- Only the domain portion of the email address is checked (e.g.
user@example.commatchesexample.com) - Make sure to add every domain your sub-users sign in with before enabling the restriction
- Domain Access Restrictions apply to account access via the CMS
- Screen playback, content delivery, and player communication are not affected
Important
If no domains are added after checking the box, all users will be blocked and no access to this account will be enabled. Make sure to add at least one domain (including your own) before saving changes.