CIDR blocks

Number of APIs: 6

1. Create a CIDR block

POST https://{{host}}/identity-management/v3/user-admin/ip-acl/allowlist

This operation adds CIDR blocks to your account's allowlist. You can add only one CIDR block at a time. Before creating the CIDR block, you may want to validate it, to check if its format is correct.

---

2. List CIDR blocks

GET https://{{host}}/identity-management/v3/user-admin/ip-acl/allowlist

This operation lists all CIDR blocks on your current account's allowlist or other managed accounts using the accountSwitchKey parameter. Your API client designates the allowlist for the account.

---

3. Validate CIDR blocks

GET https://{{host}}/identity-management/v3/user-admin/ip-acl/allowlist/validate?cidrblock={{cidrblock}}

This operation checks the format of a potential CIDR block. If it's validated successfully, you can create it.

---

4. Get a CIDR block

GET https://{{host}}/identity-management/v3/user-admin/ip-acl/allowlist/:cidrBlockId

This operation retrieves a CIDR block's details.

---

5. Modify a CIDR block

PUT https://{{host}}/identity-management/v3/user-admin/ip-acl/allowlist/:cidrBlockId

This operation enables or disables an existing CIDR block, updates comments, IP addresses, or ranges in the CIDR block. Note that you can only update a CIDR block with IP allowlist enabled on the account. There are several CIDR blocks on the allowlist and your attempt to make changes to the CIDR block is from an IP address that's on the allowlist. You can't edit the last CIDR block in the allowlist or the CIDR block allowing access to the current user.

---

6. Delete a CIDR block

DELETE https://{{host}}/identity-management/v3/user-admin/ip-acl/allowlist/:cidrBlockId

This operation deletes a CIDR block from the IP allowlist. After you delete a CIDR block, any requests from IP addresses you deleted fail the next time someone tries to log in from that address. Users accessing Control Center from an IP address you delete aren't automatically logged out of Control Center at the time you delete the IP address. With IP allowlist enabled for the account, you can't delete the last CIDR block in the allowlist or the CIDR block allowing access to the current user. There are no restrictions with IP allowlist disabled on the account.

---