But what if they do not have a fixed IP address? It is still possible. You need to create a user account and assign permissions to the website they have permission to then in IIS also assign the permission in the Directory Security area. I have it here for a couple of users.