thanks everyone, if you're interested, enabling the feature and then putting ALL in the list of IPs will allow all IPs and once the feature is enabled, you have a field on the employee to restrict the specific employee. Nice.