# Restrict admin access

**URL:** <https://forum.pritunl.com/t/restrict-admin-access/423>\
**Category:** Pritunl\
**Created:** [September 30, 2022, 2:34pm UTC](https://forum.pritunl.com/t/restrict-admin-access/423 "2022-09-30T14:34:50Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![liranmenashe](https://forum.pritunl.com/user_avatar/forum.pritunl.com/liranmenashe/32/161_2.png) [@liranmenashe](https://forum.pritunl.com/u/liranmenashe)\
**Post date:** [September 30, 2022, 2:34pm UTC](https://forum.pritunl.com/t/restrict-admin-access/423/1 "2022-09-30T14:34:50Z")

</div>

Hey, we running Pritunl enterprise on AWS ec2 instance.  
We would like to restrict admins access from specific IPs or private NICs but at the same time allow VPN users to login, import profiles by URI, etc.  
is that possible?  
Thanks.

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [October 1, 2022, 2:05am UTC](https://forum.pritunl.com/t/restrict-admin-access/423/2 "2022-10-01T02:05:15Z")

</div>

Currently there is only one web server and one web console. A split web server is under development to allow running the administrator web console from a different port then the web console used for single sign-on.

You can use Nginx to restrict access to different paths. The configuration below should work for single sign-on.

```auto
location ~ /
location ~ ^\/sso\/[a-z0-9\/]+$
location ~ ^\/k\/[a-z0-9\/]+$
location ~ ^\/ku\/[a-z0-9\/]+$
location ~ ^\/key\/[a-z0-9\/]+$

```