Drupal is a registered trademark of Dries Buytaert
drupal 11.3.7 — Update released for Drupal core (11.3.7)! drupal 11.2.11 — Update released for Drupal core (11.2.11)! drupal 10.6.7 — Update released for Drupal core (10.6.7)! drupal 10.5.9 — Update released for Drupal core (10.5.9)! cms 2.1.1 — Update released for Drupal core (2.1.1)! drupal 11.3.6 — Update released for Drupal core (11.3.6)! drupal 10.6.6 — Update released for Drupal core (10.6.6)! cms 2.1.0 — Update released for Drupal core (2.1.0)! bootstrap 8.x-3.40 — Minor update available for theme bootstrap (8.x-3.40). menu_link_attributes 8.x-1.7 — Minor update available for module menu_link_attributes (8.x-1.7). eca 3.1.1 — Minor update available for module eca (3.1.1). layout_paragraphs 2.1.3 — Minor update available for module layout_paragraphs (2.1.3). ai 1.3.3 — Minor update available for module ai (1.3.3). ai 1.2.14 — Minor update available for module ai (1.2.14). node_revision_delete 2.0.3 — Minor update available for module node_revision_delete (2.0.3). moderated_content_bulk_publish 2.0.52 — Minor update available for module moderated_content_bulk_publish (2.0.52). klaro 3.0.10 — Minor update available for module klaro (3.0.10). klaro 3.0.9 — Minor update available for module klaro (3.0.9). layout_paragraphs 2.1.2 — Minor update available for module layout_paragraphs (2.1.2). geofield_map 11.1.8 — Minor update available for module geofield_map (11.1.8).
← All modules

control_admin_access

2 sites Security covered
View on drupal.org

This module allows block URLs in Drupal to avoid unexpected access. Returning a 401 error.

This module can be useful to allow access to the admin part only for selected IPs.

Requirements

This module requires no modules outside of Drupal core.

Similar projects

If there are modules providing similar functionality, please describe what differentiates them.

Configuration

Navigate to Config → System → Control admin access (/admin/config/system/control-admin-access)

Fill out the following two fields:

  1. Field 1 - Enter IPs or IP ranges (Whitelist): Input the IP addresses or ranges of the computers to be granted access to the specified URL or URLs.

  2. Field 2 - Enter URLs to block except for Whitelist: Specify the URLs of the pages to be blocked, excluding users specified in the first field.

For example:

In Field 1
192.168.1.10 (a single IP)
10.0.0.0/24 (an IP range)

In Field 2
/admin/settings
/user/1/edit

Users connecting from the specified IP addresses (whitelisted) will have unrestricted access to the entire site, including the specified URLs.

Users connecting from IPs outside the whitelist will be blocked from accessing the specified URLs, even if they are administrators or have other privileged roles.

This way, you can control and restrict access to certain parts of your Drupal site based on IP addresses. Adjust the IPs and URLs according to your specific needs and security requirements.

Activity

Total releases
1
First release
Jun 2025
Latest release
10 months ago
Release cadence
—
Stability
100% stable

Releases

Version Type Release date
8.x-1.4 Stable Jun 12, 2025