It is common practice, especially in a large organisation where access to certain applications will be restricted to certain users. After all, there is no need for maintenance to access Salesforce, for example, Or you may want to restrict access by time, so contractors can only logon to the network between 9 and 5, Monday to Friday.
To prevent hacking, you may wish to restrict access to a certain IP range, or Location.
These things are possible via three policies.