Ability to restrict user access by a specific IP Address

I see.

You could add the check(IP) as app_metadata and check the users IP against their required IP in their metadata.

Does that make sense?