• Documentation

Specify IP addresses for product access

Use an IP allowlist to specify which IP addresses users must use to access content in Jira, Jira Service Management, Confluence, and Atlassian Analytics.

Who can do this?
Role: Organization admin
Plan: Premium plan for Jira, Jira Service Management, and Confluence. Enterprise plan for Atlassian Analytics.

IP allowlist controls apply to:

  • Confluence spaces and pages (including public links)

  • Confluence administration

  • Jira tasks, issues, projects

  • Jira Service Management customer and agent-facing portals within the same site URL

  • Jira administration

  • Atlassian Analytics

If users attempt to access these pages from an IP addresses that is not in the allowlist, they’ll see a message explaining why they don’t have access. Users also won't be able to access that product programmatically via the APIs.

If users access your products from a Chrome browser, it's possible that their IP address doesn't update when they connect to a different network. This is an issue if their new address is in an allowlist. If this happens, tell your users to clear their browser's cache by entering these keys: Ctrl/Cmd + Shift + R.

View your IP allowlists

To view your IP allowlists:

  1. Go to admin.atlassian.com. Select your organization if you have more than one.

  2. Select Security > IP allowlisting.

You will be able to access admin.atlassian.com even if the IP is outside the range of the allowlist.

Add an allowlist

To add an allowlist:

  1. Go to admin.atlassian.com. Select your organization if you have more than one.

  2. Select Security > IP allowlisting.

  3. Select Create allowlist.

  4. Enter a Name for the allowlist.

  5. Select the Products to apply the allowlist.

  6. Enter the IP addresses to allow. You can enter up to 500 IP addresses, separated by commas.

  7. Choose whether to enable the allowlist immediately, or later.

  8. Click Create to save the details.

What values can you add?

You can set up 500 IP addresses or network blocks per product. We support IPv4 for individual IP address. If you're entering a network block, we support the CIDR notation standard for specifying a block of IP addresses. Refer to CIDR notation more details about how to use CIDR notation.

Some examples of values that you can add.

Type

Examples

IPv4

104.192.143.1

CIDR block

104.192.143.0/28
104.192.143.16/29
104.192.143.24/32
2401:1d80:1010::/64
2401:1d80:1010::150/128 

IP allowlist exceptions

In some cases, we cannot restrict access for users in your IP allowlist to specific information in Jira, Jira Service Management, and Confluence.

Regardless of your IP allowlists, users can always see the following information types:

Information types

How to find information

Example

Recent history in start.atlassian.com

To find Recent history, you go to Recent from the homepage in Confluence.

  • Jira at acme1.atlassian.net
    Restrict access for users in IP allowlist

  • Jira at acme2.jira.atlassian.net
    Don't restrict access for users in IP allowlist

When a user goes to start.atlassian.com in Jira, they can see recent history for both sites whether or not they are part of the IP allowlist

Notification details

To find Notifications, you select the {icon} to see notification details.

Smart Links that anyone shares in Confluence or Jira

To create a Smart Link, you copy and paste the URL to any page.

We also don't apply your IP allowlist restrictions to the following:

  • Application links that use TwoLeggedOAuth

  • Connect applications

Still need help?

The Atlassian Community is here for you.