Use the IP Allowlist to prevent Syncro account access from any device not listed below. You can enter individual IPv4/IPv6 addresses or CIDR ranges (e.g., 192.0.2.0/24).

The IP Allowlist is off by default, but Syncro recommends enabling the IP Allowlist for both Users and APIs. Note that the API restriction applies to all calls, including those from third-party integrations.

Watch this short video to learn more:

Create Your IP Allow List

1. Navigate to Admin > Employees - IP Allow List.
2. Use the Allowed IP Address List fields and the Add button to add all the public IP addresses of users and integrations connecting via our API (for which you have made API keys) to allow them access to Syncro:
   
   Clicking Add will create a row in the table, sorted by the Name column by default.
   IMPORTANT: 

• Add the IP addresses of all Global Admins here. If you forget, Global Admins may be temporarily logged out until they receive the email described in Unauthorized Access. When they click Approve, their IP address will be added.
• If you're on a Team Plan and are using either Azure AD Sync or Database Backup, you must add 3.227.99.15 to your allowlist. (The IP addresses of Azure AD or the Database to which you are backing up do not need to be added.)
• If you're using PowerBI, you must allow API requests for the integration to work. If the “Enabled for APIs” toggle is On, you should also add the entirety of Azure's IP Ranges to your allowlist.

Unauthorized Access

If enabled for Users, any users on unlisted IPs will encounter this screen:

Additionally, Global Admins will receive an email notifying them of the attempt. This email includes an Approve button so you can easily add the blocked IP address to the IP allowlist:

Allowing Integrations

Here are some commonly used vendors (and links to their IP resources) that you may want to add to your IP allowlist:

• Domotz
• Lifecycle Insights
• Lifecycle Manager
• Lionguard
• Quickpass

Disable the Allowlists

To disable the IP Allowlist for Users and/or APIs, set the “Enabled for Users” and/or “Enabled for APIs” toggles to the OFF position. This will disable the feature(s).