Despite the wording in the admin console indicating that Egress IP addresses are required as part of the user access policy, it turns out that they are in fact, optional! If they are listed then all machines must be WAN accessible which is not possible for a school lab environment.
Removing any and all IP addresses from the Egress IP address list, removed the IP address error message.