To protect Shotgun data from disclosing, it's good to apply IP whitelist so that data can only be accessed from authorized network. But for some supervising members they may need to access Shotgun from other locations, and with mobile devices, and it seems not possible to manage with IP whitelist as its IP is dynamic.
I suggest that IP filter should be able to apply on specific user or user group so that we can handle such exceptions with user groups.