Skip to main content

Security Policy Guide 25.2.10

Provision Changes

Suppose you have made any changes to provisionable objects, such as policies, IP lists, services, label groups, and security settings. In that case, you need to provision those changes before they can take effect.

  1. Go to Draft & Versions

    The Draft Changes page lists all policy items that have been added, modified, or removed. The top of the page summarizes changes by item type.

  2. Select the items you want to provision.

  3. Click Provision to preview the changes that will occur when you provision them.

    Note

    When you selectively choose items to provision, some of those items might also have dependencies that are published. Any object dependencies will also be provisioned.

  4. Click Provision to push all the policy changes to workloads.

Revert Provisioned Changes

Any changes you make to policy configuration items (policies, IP lists, label groups, services, or security settings) appear as pending provisioning.

You can revert those changes before provisioning them.

  1. From the PCE web console toolbar, click Draft & Versions > Drafts.

    When you selectively choose items to provision, some of those items might also have dependencies that are published. Any object dependencies will also be provisioned.

  2. Select individual items or all items to revert changes.

  3. Click Revert.

Provision Note Setting

You can make a provision note mandatory before you provision the rules. It is disabled by default, but you can enable it to make it mandatory. This feature supports the need to describe context before provisioning and can support your organization's internal workflow.

When enabled, you must populate the note field before provisioning changes.

Users should populate the Provision Note field with a link to their internal bug-tracking system or a project number for tracking purposes. The error message they see when they leave the field empty will remind them to do so.

Illumio Core does not validate the content entered in the Provision Note field.

You cannot provision updates until you enter text in the Provision Note field. The button Confirm & Provision is initially grayed out. After you enter the appropriate text in the field, the button is enabled, and you can provision the update.

Note

To access this feature, you must have the correct role and permissions. If necessary, contact your Illumio administrator for assistance.

To make the provision note mandatory:

  1. Choose Policy Settings

    The option in the Policy Settings page for PROVISIONING is set to No by default.

  2. Click Edit.

  3. Change the option Require Provision Note to Yes.

  4. Click Confirm and Save.