When you first enable Profile Manager, all users can connect to it from all network address ranges. Two exceptions are screen sharing and SSH, which are limited to users who are members of the Administrators group.
