LBAC - how are companies providing the trusted IP address

Content

Hello,

We're interested in exploring the LBAC feature, we feel this would be useful for roles which provide access to other colleagues data beyond their own / their teams. 

For example, public roles could be (accessible from any IP):

• Employee
• Line Manager

Private roles (restricted to only trusted IPs):

• System Administrators
• People/HR Partner
• Reporting roles

Our query is around, when colleagues are working in multiple locations, including from home, how do we identify the trusted IP. Ideally, if the colleague/user is using a company device, then we would like to class this as 'trusted' and everything else would be public.