> For the complete documentation index, see [llms.txt](https://guides.mangoapps.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://guides.mangoapps.com/mobile-apps-guide/mobile-access-restrictions.md).

# Mobile Access Restrictions

### **Overview**

MangoApps provides the flexibility to restrict access to its mobile apps based on user segments. This feature ensures that only a defined group of employees can log in and use the mobile apps, adding an extra layer of security and control.

<figure><img src="/files/gNJUfB5TpbEVZB5r86jb" alt="" width="563"><figcaption></figcaption></figure>

The **Mobile Access Controlled by User Segment** feature allows administrators to:

* Restrict mobile app access (iOS, Android, iPad) to a specific segment of users.
* Ensure access is granted only to users who meet **both** the device type permissions and the user segment criteria.

***

### **Setup Instructions**

To get started, from within the web browser, navigate to **Admin Portal > Security > Mobile Access**.

Toggle the **User Access Restriction** setting to **ON**.

<figure><img src="/files/HhaNCoJkCBuxp86aWFJ7" alt="" width="563"><figcaption></figcaption></figure>

Choose the specific user segment you wish to allow mobile access. Only users within this segment will be able to authenticate into the mobile apps.

In the same section, check the **Device Access Permissions** settings. Ensure that the appropriate device types (iPhone, Android, iPad) are enabled.

<figure><img src="/files/vYQIYVH4h75DNHnUSkR8" alt="" width="563"><figcaption></figcaption></figure>

{% hint style="danger" %}
Once this access restriction configured, users must meet **both** the device type and segment restrictions to gain mobile access.
{% endhint %}

***

### **Dynamic Segment Support**

If you use a **dynamic user segment**, MangoApps evaluates access permissions in **real-time during login**.&#x20;

This means:

* No manual updates needed when user roles or attributes change.
* Access remains aligned with your organization’s current policies automatically.

***

### **Best Practices**

* Use **static segments** for tightly controlled mobile access groups.
* Use **dynamic segments** when access needs to reflect real-time organizational changes.
* Regularly review both **device** and **segment** permissions for optimal security.