This feature is only available if you are on the Enterprise licensing plan, and requires the Advanced Tier.

 

如果您想保护对组织的访问，并且只允许公司网络内的用户访问组织，则可以指定要允许的 IP 地址，我们会阻止所有其他流量。

 

在开始之前

---

先决条件

要使用此安全选项，您需要具备公司网络和 IP 范围方面的领域专业知识。

范围

IP 限制影响：

• 通过用户界面登录的用户
• 使用平台 API 或 UiPath 服务 API 的程序和自动化。

如果代理（用户或程序）没有任何受信任的 IP，则在强制执行 IP 限制后，他们将无法与您的组织、其所有租户、其服务或相关 API 交互。

支持的 IP 地址

• 您可以为 IPv4 或 IPv6 类型的地址定义受信任的 IP 范围。
• 您必须使用无类别域间路由 (CIDR) IP 格式。
• 您无法为私有地址定义受信任的 IP 范围。

测试环境

我们强烈建议先在非生产环境中执行此配置并对其进行测试，然后再将其应用于生产环境，以避免对用户和自动化项目造成干扰。

 

添加可信 IP 范围

---

如果您的专用网络使用一组已知的 IP 地址，则可以在“安全设置”中添加这些地址，以仅允许来自这些地址的用户访问您的组织。

1. 转到“管理员”。
2. Make sure that the organization is selected at the top of the left pane and then select Security Settings.
   组织的“安全设置”页面随即打开。
3. 在顶部，选择“ IP 限制”选项卡：

4. Add a set of IP addresses.
   You can add trusted IP ranges one by one by clicking Add trusted IP range, or add them in bulk by clicking Upload CSV. For detailed instructions, see below.

After you enable IP restriction, as described below, only users and programs that have an IP that was declared in one of the trusted IP ranges can access your organization. If they are not, they see an Access forbidden message when trying to access the organization.

Next steps: After you have added all of the IP sets,, proceed with the instructions in the next section to enable IP restriction.

Adding trusted IPs one by one

1. Click Add trusted IP range. The Add trusted IP range panel opens at the right of the window.
2. Fill in the IP set name field with a suggestive name for this range.
3. Under Add IP rage(s), in the field, type a trusted IP address. The address can be IPv4 or IPv6 and must be in Classless Inter-Domain Routing (CIDR) format.
4. To add another address, click Add more under the field to add another field.
   拥有此范围内 IP 的用户将能够访问您的组织。任何其他地址的用户则无法访问。
   Your current IP is shown at the top of the panel so that you make sure to include it, otherwise you won't be able to enable IP restriction. This is because if your IP address is not included in a trusted range, enabling IP restriction would lock you out.
5. 单击面板底部的“添加”。
   关闭面板后，集合将显示在页面上。
6. 重复上述步骤，根据需要添加任意数量的 IP 地址集。

Adding trusted IPs in bulk

1. On your local machine, create a new CSV file as follows:
   • The header (first row or first value) must include IP Ranges.
   • Add each trusted IP range (in CIDR format) as a new value, or a new row.
   • If working in a table format, you should obtain a one-column table with IP Ranges being the first row. If working in CSV format, you should have one row, with IP Ranges being the first value.
2. Save the file locally under any name, with a .csv extension.
3. In Automation Cloud, on the IP Restriction page, click Upload CSV.
   “上传 CSV ” 对话框将打开。
4. Click Upload file and select the CSV file you created.
   The upload begins and a success message is displayed along the top after it completes.
   Imported IP ranges are displayed in the list of trusted IP ranges with an IP set name of the form Imported on <date>. You can edit the set to update the name.

 
In case any errors are detected in the uploaded file, the import is aborted. The Error Summary displays information about what IP ranges could not be imported and why. Click OK to close the dialog. You must fix the indicated errors and then try again.

Enabling or disabling IP restriction

---

启用 IP 限制以阻止来自您已声明的可信 IP 范围以外的 IP 地址流量，或禁用 IP 限制以允许来自任何 IP 的访问。

1. 转到“管理员”。
2. Make sure that the organization is selected at the top of the left pane and then select Security Settings.
   组织的“安全设置”页面随即打开。
3. Along the top, select the IP Restriction tab.
4. On the right, under Enforcement type, select an option:
   • To enable IP restriction, select Allow only trusted IPs.
     只有使用特定 IP（位于某个受信任的 IP 范围内）的代理才能访问您的组织。
   • To disable IP restrictions, select Allow all IPs.
     即使在页面上定义了受信任的 IP 范围，设置此选项后，仍允许从任何 IP 进行访问。
5. 在确认对话框中，单击“确认”以启用 IP 限制。

获取帮助

---

In case you accidentally lock yourself out of Automation Cloud, or encounter other issues, contact Support for assistance.