---
title: Restrict the User to connect to a specific set of Regions
canonical: https://openvpn.net/cloud-docs/owner/users/users---groups/restrict-the-user-to-connect-to-a-specific-set-of-regions/
product: CloudConnexa Docs
description: Limit the CloudConnexa Regions a user can connect to based on the User Group.
keywords: User location connection restriction
---

# Restrict the User to connect to a specific set of Regions

You can limit the CloudConnexa Regions that users in a User Group can connect to based on your organization's requirements.

For example, if your policy requires that a specific department's traffic remain within the United States, create a User Group for that department and select only U.S. CloudConnexa Regions in the **Region** setting during configuration.

For a list of all CloudConnexa Regions, refer to [Locations of CloudConnexa Regions](https://openvpn.net/cloud-docs/owner/get-started/about-cloudconnexa/locations-of-cloudconnexa-regions.md).

## Default region selection during user group creation

When creating a new User Group, the **Default Region** configured under **Settings → WPC** is preselected in the Region setting.

To change the preselected Default Region value during User Group creation, refer to [Add a User Group](https://openvpn.net/cloud-docs/owner/users/users---groups/add-a-user-group.md).

To modify the Region setting for an existing User Group, refer to [Edit a User Group](https://openvpn.net/cloud-docs/owner/users/users---groups/edit-a-user-group.md).

## Region changes take effect immediately

> **Important**
>
> Changes to the Region setting take effect immediately after the User Group is updated.
>
> If a Region is removed from a User Group, users assigned to that User Group as **Primary** may be disconnected if they're currently connected to the removed Region. The connection is terminated because it no longer matches the updated configuration.

### If a user is disconnected

If a user is disconnected due to a Region change, they must:

1. Download a new connection profile.
2. Install the updated profile on their device.
3. Reconnect using one of the permitted Regions.

### Best practices to minimize disruption

Before removing a Region:

- Review Region activity in the CloudConnexa Admin Portal.
  - Navigate to **User Groups → Users** and apply the filter: **Connected to: \[Region Name\]** to identify any active devices currently connected to the Region you plan to remove.
- Notify affected users in advance if they're connected to a Region that will be removed.
- If using manual connection profile distribution, generate and distribute updated connection profiles that include only the permitted Regions before applying the change.

After confirming that users have updated their connection profiles, proceed with removing the Region from the User Group.

---

Prev: [Restrict the Number of Devices per User](https://openvpn.net/cloud-docs/owner/users/users---groups/restrict-the-number-of-devices-per-user.md)
Next: [Set a User's connection authentication policy](https://openvpn.net/cloud-docs/owner/users/users---groups/set-a-user-s-connection-authentication-policy.md)
Index: https://openvpn.net/cloud-docs/llms.txt