Network access to a project

Let the team in only from listed addresses, not locking yourself out, refused attempts in the audit.

The project administrator can let the team into the project only from listed addresses: the sponsor’s office, the clinic’s network. Large sponsors often ask for it. The list is off by default, and people get in from anywhere.

Switching it on

1. Open the project → Settings → the Security block → Network access → Set up.
2. Write the addresses, one per line: a single address (203.0.113.10) or a network (198.51.100.0/24), IPv6 too. After # you may leave a note for yourself: 203.0.113.10 # sponsor’s office.
3. Tick “Let people in only from these addresses” and press Save.

The sponsor’s or the clinic’s IT team gives you the network’s addresses. The right side of the page shows your current address and whether it is in the list.

Not locking yourself out

If your current address is not in the list, the portal does not save it at once: it warns “You will lock yourself out”. Press “Add my address”, or tick “I understand, save anyway” when you set the list up in advance, for example from home for the office. The Portal Owner is never refused and can switch the list off if the team is locked out.

What a person outside the list sees

The page “No access from this network” with their address and the name of the project administrator. In My studies the project is marked “opens only from the project’s network”, and its numbers do not reach the desk and the summaries. API keys also work only from listed addresses. Patients’ ePRO links are not affected.

Audit trail

Every change of the list (switching on, off, new addresses) goes to the project’s audit trail with the old and the new value. Every refused attempt goes there too, with the address, at most once a minute for the same person and address. The last refused attempts are shown on the Network access page itself.