Access to any Sitefinity Cloud environment and environment-specific areas can be restricted through an IP whitelist. The list of IPs is provided by the customer.
In case of multiple dynamic IPs for individual users, the customer can use a VPN service to provide a single outbound IP address. The VPN service would be a responsibility of the customer and is not provided as part of Sitefinity Cloud.