People Resources

Setting IP restrictions and Geo-restrictions

• IP Restrictions
• Geo Restrictions

Setting IP Restrictions

Zoho People's Attendance module comes with restrictions and settings that allow you to track attendance of your employees in a very streamlined and regulated way. You can have IP restrictions set for marking attendance. For instance, if you would like to prevent employees from marking attendance from outside the office, adding IP restrictions will help you achieve this. If there is an IP range specified by your administrator, then your employees will not be able to mark their attendance from anywhere outside the range. IP restrictions can be set based on roles. 

1. Click Settings (gear icon) > Allowed IPs (under User Access Control)  > Add IP Restriction.
2. Give the IP range.
3. Choose the Module.
4. Under Applicable, select the location, department, designation, role, or employee. A combination of what is selected under location, department, designation, and role will be considered as the applicable group. For example, if HR is chosen under Department and Team member is chosen under Role, then this IP restriction will apply to all HRs who are team members. 

5. Under Exceptions, you can select the location, designation or employee that you want to exclude if required. As per the above example, the IP restriction will apply for all HRs who are team members except those located in Chennai. 

6. Click Submit.

You can set IP restrictions for three modules - Attendance, Timesheet, and Files. 

Note: While configuring IP restrictions, we always recommend using Static IP Addresses as the Dynamic IP Address gets refreshed in every 72 hours. Hence please check with your ISP to get a Static Public IP address to implement the same in Zoho People. Contact support@zohopeople.com for any further assistance.

Set geo-boundaries within which your employees can mark their attendance. If you would like to define a location range within which employees can mark their attendance, this is possible by adding geo-restrictions. You can set a range on the map and prevent employees from marking their attendance from any range that is outside of the one which is specified by the organization. This restriction can be set even for specific teams, designations, etc making it useful for you to track the attendance of specific teams like sales, Marketing, etc.

Follow the steps given below to do this.

1. From your home page, go to Settings (gear icon) > Geo Restriction (under User Access Control).

2. Click Add Geo Restriction.

​

3. Select the Applicable tab.
4. Under Applicable tab, select the location, department, designation, role or employee. A combination of what is selected under location, department, designation, and role will be considered as the applicable group. For example, if HR is chosen under Department and Team member is chosen under Role, then this Geo restriction will apply to all HRs who are team members. 
5. Under Exceptions, you can select the location, designation or employee that you want to exclude if required. As per the above example, the Geo restriction will apply for all HRs who are team members except those located in Chennai. 

6. Use the Search tab to search for the starting location of your range. You can pin the location by entering the location name or the latitude and longitude coordinates of the location.

7. Use the drawing tool (choosing from a variety of shapes like circle, rectangle, polygon, etc) bar on the right-hand side to mark the range.

8. Click on Submit to save. Use the Show My Location icon to come back to the current location at any time.

Tip: Use the delete layers icon in the drawing toolbar to delete a selection that has been made. Click Save after deleting and use the shapes to define your range again.

  Using IP restriction, you can only define a particular IP address from which employees can access the modules. However, using geo-restriction, you can define a range (in location) within which the modules can be accessed.

Setting geo-restrictions for multiple locations

For organizations operating in multiple locations, you can have geo-restrictions set for multiple locations as well. You can mark your office address, residence of your employees and more as per your organization's needs.

 If you want to enable attendance to be marked for a particular employee from another location of your organization and also from their residence, this is possible.

In this scenario, you can create two types of geo restrictions.

1. Office location
2. From home

To define geo-restriction for another location of your organization, follow the steps given below.

1. From your home page, go to Settings > User Access Control > Geo Restriction > Add Geo Restriction.
2. Give a name.
3. Under Modules, select Attendance.
4. Under Applicable and Exceptions, select the required fields. 
5. Use the Search tab to search for the starting location of your range.
6. Use the drawing toolbar at the right-hand side to select the range.
7. Click on the 'Show My Location' icon to come back to the current location.
8. Click Submit.

To define the next geo-restriction (work from home), follow the same steps as above and in the range, select the employee's residence range.

Now, the employee will be able to mark attendance at the other location of your organization and also from his/her residence.

Editing/Deleting a geo-restriction

You can make changes to a geo-restriction which has been added. Follow the steps given below.

1. From your home page, go to Settings > User Access Control > Geo Restriction.
2. Hover your mouse and select the edit icon of the geo-restriction.
3. Make the changes and click Submit.

To delete :

1. From your home page, go to Settings > User Access Control > Geo Restriction.
2. Hover your mouse and select the delete icon of the geo-restriction.