The Site IP Allow list is a whitelist, i.e. only these IPs are allowed to access the site's administrator. Putting an IP there is not enough, you would have to enable this feature in the Configure WAF page as well. I do not recommend this option unless you have a static IP address and that place is the only place from which you will ever access your site's backend.
The IP address in the WAF Exceptions List hands "get out of jail free" cards to these IP addresses. It does not block other addresses from accessing the site's administrator. The idea here is that when these excepted IP addresses do something that would normally block the request, this won't happen. It's a way to say "hey, these IP addresses are going to be doing weird things; it's okay, please don't block them". That's what you seem to want to do.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!