The security team at Cloud Kicks discovered that a group of contractors who use the 'Contractor' profile are logging in from personal devices outside the corporate network. Leadership wants to ensure that users assigned to only the Contractor profile can log in exclusively from the office IP range, while all other employees remain able to log in from anywhere. What should the administrator configure?