protect access to pages or content elements via frontend groups that are only added when specific access restrictions are matching
- allows single IP validation e.g. 192.168.0.1
- allows range IP validation e.g. 192.168.0.1-192.168.0.255
- allows subnet IP range validation e.g. 192.168.0.1/24
