Network accessDraft

Network access lets your organisation control which networks people can use to access Autopilot. You approve the public IP addresses or address ranges used by your offices and company VPN. When restrictions are enabled, people must connect through one of those networks to access your organisation and its linked dealerships.

Network access is not yet available in the production app. This guide covers the controls being prepared for release.

Why use network access?

Approved networks add another layer of protection alongside sign-in and account permissions. Even someone with valid sign-in details cannot access your organisation from an unapproved network while restrictions are enabled.

Use network access to:

• Keep access within your business networks. Approve your office connections so staff can work from the dealership while access from other networks is blocked.
• Support staff working remotely. Approve your company VPN’s public exit address so staff can connect through it when working away from the office.
• Manage access across linked dealerships. Maintain one organisation policy that also applies to its linked dealerships, including administrators and people with direct dealership access.

For example, you could approve your office connection and company VPN. Staff at the office can work as usual. Someone using home Wi-Fi or mobile data must connect to the approved VPN before accessing the organisation. A person who is already signed in is also blocked on their next protected request if they move to an unapproved network.

How it works

Autopilot compares the public IP address used by a connection with your approved list. This is the address your office or VPN uses to reach the internet; it is not the Wi-Fi name or a device’s local address. Ask your IT provider to confirm the static public addresses to approve.

An approved network does not grant account access by itself. People still need to sign in and have the appropriate permissions. Network access does not approve individual devices or prove someone’s physical location, and it does not replace strong sign-in security.

Where to find it

Open your organisation workspace, then choose Security centre → Network access.

Who can manage it

Organisation administrators can manage the approved network list. Restrictions apply to everyone accessing the organisation and its linked dealerships, including administrators and people with direct dealership access.

Check your current IP

Your current IP shows the public address used for your connection. Check that you are connected to the office network or company VPN you intend to approve.

Ask your IT provider to confirm the static public exit addresses for each office and VPN. These are different from a Wi-Fi name or a device’s local address. Your office and VPN may share an exit address; if they use different addresses, add both.

Add an approved network

1. Select Add network inside the Approved networks card, or Use current IP to fill in your connection’s address.
2. Enter a recognisable Network name, such as your office or company VPN.
3. Enter its Public IP address or range. IPv4, IPv6 and CIDR ranges are supported.
4. Check the validation message below the fields, then select Save network.
5. If prompted, verify your identity. Autopilot returns you to Network access with your edits preserved and resumes saving the network.

The address is checked as you type and again when you save. Private, reserved and example addresses are rejected. Validation checks address format and suitability; it does not prove ownership or test whether the network responds to a ping. Confirm the correct address with your IT provider.

You can store up to 50 networks. Duplicate networks and ranges that approve every address are rejected.

Enable restrictions

1. Add your current connection to the approved list.
2. Turn on Require an approved network.
3. Review the warning, then select Enable restrictions.

The change is saved after confirmation. Autopilot prevents you from enabling restrictions with a list that excludes your current IP.

Turn Require an approved network off to allow access from any network. That change saves when you make it, subject to your current access and identity verification. Your normal sign-in and permissions still apply.

Edit or remove a network

Edit a saved network’s name or address. Valid changes save after you pause typing; check the Saving… or Saved status beside the Approved networks heading. Invalid input is not saved.

Use a network’s remove button to remove it. Keep your current connection approved while restrictions are enabled. Changes are recorded for audit.

If identity verification is required, Autopilot opens the verification screen, then returns you to Network access and resumes your change. Check that the status shows Saved. If verification is interrupted, the change remains unsaved. If another administrator saves changes while you are verifying or editing, review the message and reload the latest settings before trying again.

Outside an approved network

The next protected request is blocked, including requests from someone who is already signed in. They see You’re not on an approved network and can connect to the office network or approved VPN, then select Try again. They can also switch workspace or sign out.

A request already in progress may finish. Information already displayed or downloaded cannot be recalled.

If everyone is locked out

Contact Autopilot support. Explain that your organisation’s public IP may have changed.

Autopilot support verifies the request before changing network access. Administrators do not have a permanent exemption. After access is restored, review the office and VPN addresses and re-enable restrictions when the list is correct.

Scope

These restrictions protect authenticated organisation and linked dealership access. Public sharing links and files already downloaded are separate from this access policy.