An admin can set a list of IPs (or IP ranges) from which a user must connect to the GUI. For instance, to restrict the user (or anyone who would have stolen the user’s login/password) to only connect from the office IP.
To do this, go to My Account in the top right-hand corner of the GUI and click on Users. A list of users will be displayed.
Click on a user's name. A screen will be displayed (an example is shown below) showing the user's profile.
Add the IPs (or IP ranges) to the Whitelist IPs field.