> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/harness-platform/use-harness-platform/security/add-manage-ip-allowlist.md).
# Add and manage IP allowlists
Management of the IP allowlist involves reviewing and updating the list of approved IP addresses regularly to ensure that only authorized users are granted access. After you enable IP allowlist, only users connecting from the configured IP address/[CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) block will be able to log into Harness.
The following are some key benefits of IP allowlist management:
* **Increased security:** By limiting access to approved IP addresses only, you can prevent unauthorized access to sensitive data and resources. This protects against data breaches, cyber-attacks, and other security threats.
* **Improved network performance:** By limiting access to approved IP addresses only, you can reduce the number of requests your network receives, which improves network speed and reduces latency.
{% hint style="info" %}
**IMPORTANT**
Harness IP allowlisting is for user connections to a Harness account. It does not perform IP allowlisting for Harness Delegate connections.
{% endhint %}
This topic explains how to set up an IP allowlist in Harness.
### Important
* Make sure you have **View**, **Create/Edit**, and **Delete** permissions for **Authentication Settings** to add and manage IP allowlists.
* Ensure that your IP is added first when configuring IP allowlist else you'll lose access
* Harness returns a status code of HTTP 401 if an IP address is not allowlisted but tries to access Harness.
* An allowlist can be based on IPv4 or IPv6 or a mix of both.
* The following are the exceptions to the IP allowlist in Harness:
* Calls corresponding to SCIM.
* Calls corresponding to Identity providers.
* API calls corresponding to Harness admin.
* Harness uses an in-memory cache. All caches expire after 5 minutes. Every update takes 5 minutes because there are no manual cache updates.
* Check out the [full allowlist for IP addresses and CIDR block](/harness-platform/use-harness-platform/references/allowlist-harness-domains-and-ips.md#harness-cloud-allowlisting-for-accessing-self-hosted-services).
### Add an allowlist
To create an allowlist and add IP addresses to it, do the following:
1. Select **ACCOUNT SETTINGS**, and then select **Authentication**.
2. Select **Allowlist**.
3. Select **Add IP Addresses**.
The **IP Allowlist** settings appear.
4. Enter a **Name** for the allowlist, and then select **Continue**.
### Define the IP range
1. In **IP Address/CIDR**, enter a CIDR, an individual IP address, or a block of IP addresses.
2. Select one of the following for the allowlist application:
* **UI**: Harness allows or blocks the IP address based on the UI request.
* **API**: Harness checks the API key in the request and allows or blocks the IP address.
3. Select **Save and Continue**.
### Test IP
1. Enter an IP address to check if it falls within the IP address range configured in the previous step.
2. Select **Test**.
3. Select **Finish**.
You can create multiple allowlists and enable or disable them as needed.
### Manage IP allowlist
The IP addresses configured in the allowlist now appear in the **IP Allowlist**.
1. Toggle enable or disable beside the allowlist to enable or disable an allowlist.
2. Select the three-dot menu to edit or delete an allowlist. Select **Check any IP for allowlist** to check if an IP address is allowed.
Enter an IP address or a range of IP addresses and select **Check**.
IMPORTANT
Make sure that your current IP address is allowlisted in all enabled configurations, otherwise, they may get locked out.