Country Blocker Fraud Securify

I have a remote team member in Ukraine who needs admin access but I'd blocked the entire region for shipping compliance. Support set up a personal access link for her — a unique URL that bypasses the geo-block for her IP only. She logs in through that link and works normally. Everyone else in the region sees the block. Elegant solution I wouldn't have thought of.