Thanks @Osman and @Elisabeth_K :)
So, using @Elisabeth_K 's idea of a diagram (I like diagrams, so much easier to understand!), Something like this??
Already set, and active when my example above was taken - hence why it identifies the person, however also flags that they are on a vpn (and...