Restrict Website Access by IP Address in Power Pages

Restrict Website Access by IP Address in Power Pages

IP restriction in Power Pages allows administrators to control website access by allowing only specific IP addresses. Requests from unauthorized IPs will receive an HTTP 403 Forbidden response.

This feature helps secure enterprise portals by limiting access to trusted networks only.

Add IP Address Restriction

1. Go to Power Platform Admin Center.
2. Navigate to Resources → Power Pages Sites.
3. Select your site.
4. Open Security → IP Restrictions.
5. Click + New.
6. Choose IPv4 or IPv6.
7. Enter IP in CIDR format.
8. Click OK to save.

How IP Restriction Works

• Only allowed IP addresses can access the website.
• All other requests are blocked with HTTP 403.
• If no IP is configured, access is open to all users.
• Works alongside authentication for private sites.

Remove IP Address

1. Go to IP Restrictions section.
2. Select the IP entry.
3. Click Delete (…).
4. Confirm removal.

Best Practices

• Always restrict admin portals to known IPs
• Use CIDR notation correctly for networks
• Combine with authentication for better security
• Regularly review allowed IP list

Key Takeaways

• IP restrictions control network-level access
• Only allowed IPs can access Power Pages site
• Unauthorized users receive HTTP 403 error
• Enhances enterprise-level security