Fusion LBAC and OIC

When enabling LBAC in Fusion, does the OIC IP need to be added to the allow-list in the Security Console, or is automatically included behind the scenes? I thought it did have to be included in the allow-list explicitly, though I'm seeing perhaps not? Thanks.