Grant Admin Access to REST APIs
- Capella Operational
In order to maintain a high level of security, the REST APIs used to administer App Services can only be accessed from a set of defined IP addresses.
Any external application or service that needs to make use of the admin or metrics REST APIs (see Manage App Services with the App Services API for reference information on the REST APIs), needs to be defined in the App Service administration screen:
![Selecting the Allowed IP page](../_images/deployment/selecting-allowed-ips-ui.png)
Allowed IP
page.The App Service
page lists the IP addresses which we have allowed access. Click on the Create Allowed IP button.![Add allowed IP](../_images/deployment/add-allowed-ip.png)
IP address can be permitted temporarily (perhaps you are allowing access for testing purposes), or can be set up permanently (until the entry is deleted). The address must be entered using the CIDR[1] format
You can click the Add Current IP Address button to fill in the IP address of the machine you’re currently working on.
Press the Add IP button to save the entry.
![Allowed IP list with single entry](../_images/deployment/allowed-ip-list-with-entry.png)