I'd like to set it up so that most users are IP address restricted, but certain groups can access from anywhere via normal login.