# Network access

> Restricting where members can reach your organisation's content from.

Network access rules limit which source addresses may reach your organisation's
content. Configuring them needs `network.manage`.

## How rules apply

Rules are evaluated per request against the caller's address. A request from
outside the permitted set is refused before it reaches any content.

> [!IMPORTANT]
> Lock yourself out and you will need support to get back in. Before enforcing
> a rule, confirm the address range you are adding covers the way you connect,
> including from home and whatever your VPN egresses as.

## Coverage

Network rules govern access to your organisation's content. They do not apply
to published public content: a blueprint you have made public stays reachable
regardless of the rule.

To restrict who reads documentation, use visibility and
[reader authentication](/foliums/blueprintr-user-guide/foliums/reader-authentication)
rather than network rules.

## Client addresses

The address a rule is evaluated against is determined at the platform edge, not
taken from a request header.