IP allowlisting: Restrict access to Focus
Organization admins can now include Focus in IP allowlist policies, restricting access to approved IP addresses or ranges for both the web app and the Public API. It has been rolling out to Atlassian Cloud sites since 15 Sep 2026.
- Rolling out since 15 Sep 2026
- Medium impact
- Admin review: api change
What it is
Improvement
Focus is now a selectable app when you create or edit an IP allowlist policy in Atlassian Administration. The restriction covers the Focus web interface and the Focus Public API. Anyone connecting from an IP address that is not allowlisted gets a 403 Forbidden error.
Users who try to reach Focus from a non-allowlisted IP address get a 403 Forbidden error.
Organization admins can add Focus to IP allowlist policies under Security, then IP allowlists, in Atlassian Administration.
Calls to the Focus Public API from a non-allowlisted IP address are blocked by the same allowlist policy.
Written from Atlassian's release note and checked against it automatically. Atlassian's original stays the source of truth.
Before it lands
- Create or edit an IP allowlist policy and select your Focus site.
Where the rollout is
- First published Done
- Rollout starts Done
What changed
- First published by Atlassian
Atlas Bench began tracking Atlassian Cloud on 29 Oct 2026. Changes before that date are not in this history.