IP allowlists restrict access to Treasure Data accounts through specified sets of IP addresses. There are two types of whitelists:
- Account IP allowlist : Affects all users in an account.
- User IP allowlist : Contains IP addresses that a specific user can use to access services.
You manage your IP whitelists through the Control Panel in TD Console.
When set, users can access TD services by using any IP address specified in the account IP allowlist. However, if users have a defined user IP allowlist, they can no longer use the account IP allowlist. When set, the user IP allowlist replaces the account IP allowlist for that user.
Administrators and Account Owners can set up an IP Allowlist for themselves. The IP allowlist set up by administrators or account owners for themselves is viewed as a type of user IP allowlist.
Account Owners can modify the IP allowlists of all users in the account.
Administrators can modify the user IP allowlists of non-Administrator or non-Account-Owner users.
Restricted Users cannot modify any allowlists in the account, including their own.
Permissions are summarized in the following table:
| User type | Account Owner | Administrator | Restricted User | Self |
|---|---|---|---|---|
| Account Owner | OK | OK | OK | OK |
| Administrator | X | X | OK | OK |
| Restricted User | X | X | X | X |