How to create an allowlist for my Vimeo Enterprise account

This feature requires an Enterprise plan.

Owners and Admins of Vimeo Enterprise accounts with custom subdomains have the option to restrict access to certain administrative features by specifying allowed IP addresses, ranges, or CIDR blocks. When enabled, this setting blocks login attempts to admin functions from IP addresses that are not explicitly permitted.

This article explains how to create and manage your IP allowlist.

In this article: 

• What to know before setting up your allowlist
• How to create an allowlist
• How to add IP addresses to the allowlist
• How to import IP addresses using a .csv file.
• IPv4 address formatting guidelines

What to know before setting up your allowlist

Before setting up your IP allowlist, note the following: 

• This feature is designed to add an extra layer of access control, helping safeguard sensitive management functionalities on your account, complementing Vimeo’s existing identity and access management tools.
  • Note: This feature does not guarantee complete protection against unauthorized access and should be used in conjunction with other recommended security practices. Vimeo is not responsible for access gained through misconfigured settings or circumvention of IP restrictions.
• On Vimeo, an allowlist refers to a list of IP addresses, ranges, or CIDR (Classless Inter-Domain Routing) blocks that are approved to access Admin features on an Enterprise account.
• You must be an account owner or admin on a Vimeo Enterprise account to create an allowlist.
  • The Vimeo Enterprise account must have a custom subdomain.
• You’ll need a list of IP addresses, ranges, or CIDR blocks for approved users.
  • You can either upload them manually one by one or add them in bulk as a comma- or line-separated list or by uploading a .csv file. 

How to create an allowlist

Once the addresses are identified, Enterprise account Owners and Admins can add them through the account settings page of the Enterprise account to set up the allowlist. 

To create an allowlist: 

1. From the account settings page of the Enterprise account, select Allowlist
   
2. If it is your first time creating an allowlist, select Create allowlist.
3. The first IP address added to the allow list must belong to the Owner or Admin on the account. Select Add IP address to add it to the list.
4. In the Add IP Address pop-up, add a single IP address, range, or CIDR block accessible to the account owner or administrator. 
   
5. Provide an optional nickname to help you identify it. For example, use the name of the Admin that an IP address corresponds with, or label the office location associated with an IP range.
6. Confirm the details and select Add IP.

How to add IP addresses to an allowlist

The Owner or Admin can add additional IP Addresses, ranges, and CIDRs to the allowlist to restrict access. These can be added one at a time or in bulk as a comma-separated list. 

To add IP addresses to an allowlist: 

1. From the allowlist page on the Enterprise account’s settings page, select the Add IP Address button on the right side of the page.
2. Add an IP address, range, or CIDR block. Provide an optional nickname so that you’ll be able to identify it.
3. Review the addresses added and select Add IP. 

You can add multiple IP addresses, ranges, or CIDR blocks separated by commas or lines. 

How to import IP addresses by using a .csv file.

You can also upload a .csv file of IP addresses, ranges, and CIDR blocks. 

To import IP addresses by using a .csv file: 

1. From the allowlist page on the Enterprise account’s settings page, select Import >  Download CSV template on the right side of the page. 
   
2. Format your list according to the CSV template and save it to your local device.
3. Select Import > Import CSV. 
   
4. Select and upload your formatted .csv template file. 

If your import fails, check that your CSV file is formatted correctly as per the CSV template and the IPv4 formatting guidelines. 

About IPv4 address formatting guidelines

When developing your allowlist, note that IPv4 addresses must be formatted accordingly. Refer to the table below that describes the formatting criteria and provides examples of both correctly and incorrectly formatted IPv4 addresses. 

If you get an error indicating that your IPv4 address is incorrectly formatted, verify the address and reformat it as needed.