The access rules allow by specified NDS user or users indicating a OR
for multiple users.
This seems to mean an OR rule is I specify an NDS user and list a IP
address range. Correct?

Can an access rule(s) be set to allow a specified NDS user to only
connect from a specified IP address?