Scenario
User can check the following pages why a not permitted IP Address is able to access NetSuite.
Solution
- Navigate to Setup > Company > Enable Features > Company tab > Access section
IP Address Rules: Check this box to make an IP Address Rules field appear on the Company Information page and on the Access subtab of employee records.
Note: Enabling the IP Address Rules feature does not retroactively apply IP address restrictions to preexisting customized roles. IP address rules allow you to restrict employees access to certain computers for logging in to your NetSuite account by setting company-wide rules at Setup > Company > Company Information or employee-specific rules on employee records. - Navigate to Setup > Company > Company Information
Allowed IP Addresses: Enter valid IP addresses (in dotted decimal notation) from which you want employees in your company to access your account. You can override this setting for individual employees and for custom roles. For individual employees on employee records, clear the Inherit IP Rules from Company box, and make an entry in the IP Address Restriction field on the Access subtab. For custom roles, clear the Restrict this role by IP Address box on role records. - Edit Employee > Access tab
Inherit IP Rules From Company: Check this box to allow this employee NetSuite login access at the IP addresses listed at Setup > Company Information. If you check this box, this employee has access to NetSuite at every company computer with access unless you specify IP address(es) in the IP Address Restriction field. If you do not check this box, you must enter an IP Address where this employee can log in in the field below, or this employee will not be able to log in to NetSuite.
IP Address Restriction: Enter the IP address(es) where you want this employee to have access. If you do not enter an IP Address here, you must check the Inherit IP Rules from Company box, or this employee will no longer be able to log in to NetSuite. - Navigate to Setup > Users/Roles > Manage Roles > View Role
Restrict This Role By IP Address: Check this box to restrict users assigned to this role by IP address. You can set up IP Address restrictions at Setup > Company > Company Information.