At the moment IP allow list can be used to only restrict access to the cloud site. 

It would provide additional security if the allow list can also be applied on the organization administration

• Restrict access to admin.atlassian.com web pages.
• Restrict access to organization level APIs