Using SourceIp in ALB Listener Rule

For port 443 of an ALB, it's often set public but some domains are restricted access outside of office/working network especially those one do not have login phase (it's always possible to setup this but in this case assume no), for example, grafana....