incorporating feedback

Author: Blackmist

articles/machine-learning/how-to-managed-network.md

@@ -1033,6 +1033,18 @@ If you plan to use __HuggingFace models__ with Azure Machine Learning, add outbo
 * `cdn.auth0.com`
 * `cdn-lfs.huggingface.co`
 
+### Scenario: Enable access from selected IP Addresses
+
+If you want to enable access from specific IP addresses, use the following actions:
+
+1. Add an outbound _private endpoint_ rule to allow traffic to the Azure Machine Learning workspace. This allows compute instances created in the managed virtual network to access the workspace.
+
+    > [!TIP]
+    > You can't add this rule during workspace creation, as the workspace doesn't exist yet.
+
+1. Enable public network access to the workspace. For more information, see [public network access enabled](how-to-configure-private-link.md#enable-public-access).
+1. Add your IP addresses to the firewall for Azure Machine Learning. For more information, see [enable access only from IP ranges](how-to-configure-private-link#enable-public-access-only-from-internet-ip-ranges-preview).
+
 ## Private endpoints
 
 Private endpoints are currently supported for the following Azure services: