Users are able to login to Account option outside allowed IP's using Context-Aware Access

[raheelqureshi]

Hello,

We are using Context-Aware Access (allowed office IP's only) to restrict users from login to our corporate email addresses on google outside the office network. Still, they can log in with a warning “You don’t have access, A company policy is blocking access to this email” on that page at the top right corner. It shows there is a menu (9 dots). When you click on that menu, you can see the “Account” option. You can access all account information and make changes to the recovery email and phone, etc. Access to email and other options are blocked except the Account option.

Also, you can access the google password manager in that section and can view all passwords.

In an ideal situation, restricting the accounts access on outside allowed IP's should NOT show that page and restrict users from making changes or viewing saved/sync passwords.

I tried multiple support engineers over chat, but all cannot restrict that page or guide me to restrict the Account option outside the allowed network.

Please make that change to the Context-Aware Access system or restrict the Account option like email and other options.

Regards

[sudhanshu]

@Pratyusha : We hope to see this feature.

Positive: Appsheet adoption is growing.

Problem: We blocked gmail and other apps outside company IP but they still have access to Appsheet outside IP of company.

Reason: This is because Context-Aware Access is not applied to Appsheet apps when "Asigning" policy to apps.

Solution: Bring Appsheet under Google apps as a service such that we are able to apply policy on Appsheet apps as well.

[Pratyusha]

Thank you for your suggestion. While we can't commit on the likelihood of this being implemented, especially in the short timeframe, we do appreciate your feedback.