Hi, we’re using Pritunl with one server per environment (Organizations → Servers → Routes), and we’ve run into a limitation.
Today, access control appears to be at the server level, so users can access all routes attached to a server. We need to restrict production users to only specific IPs/hosts within the same server, without creating separate servers for every IP combination.
Is there a supported way Enterprise to achieve per-user, per-IP route access within a single server? If not, what’s the recommended approach, and is this on the roadmap?
Pritunl Org:
│
├── Server: Staging (Group: staging)
│ └── Routes: full staging subnet(s) → all resources granted
│
├── Server: Non-Prod (Group: non-prod)
│ └── Routes: full non-prod subnet(s) → all resources granted
│
└── Server: Production (Group: production)
└── Routes: full prod subnet
└── 
need: per-user grant to only specific IPs within this route
e.g. user A → 10.x.x.11 only
user B → 10.x.x.11, 10.x.x.25
(not the whole prod subnet)