Skip to main content

Illumio Administration Guide 25.4

PCE Organization and Users

A PCE organization is a group of policies and users targeted toward a specific business group or unit, including all the networking security rules and people who are associated with the policy. An organization can contain any number of users, workloads, policy objects (policies, IP lists, services, and security settings), and labels.

Your Illumio administrator initially sets up organizations. When an organization is created, an email containing a user login is sent. The organization is created when this user logs in, and users can now be invited to join.

Invite Users to Your Organization

When you are an organization owner, you can invite other users to your organization and grant them roles to specify permissions for those users.

When you invite a user to your organization, they receive an email at the specified address containing a link for their account setup. The link in the invitation email is valid only for 7 days, after which it expires. If you invited a user who did not receive their email or did not sign up using that email, you can re-invite them.

External Users and Non-Email Usernames

When you use an external corporate Identity Provider (IdP) to authenticate users with the PCE, but your IdP usernames do not use email addresses, the PCE cannot send email invitations to those users when you add them to the PCE. When you add this type of user, send them a login URL that they can use to set up their Illumio Segmentation for Data Centers accounts and log in to the PCE web console.

Invitation Emails Are Not Sent

When users you invite do not receive their invitation emails, the SMTP server might not be configured correctly with the PCE.

  • Make sure that your PCE’s IP address is allowed to relay messages and that any anti-spam protection does not block its emails.

  • Check your PCE's runtime_env.yml file to make sure that the smtp_relay_address value is correct.