Microcosmos (Portal)¶

Microcosmos is a web portal that allows authorized users to view and manage their Illumio-protected application scopes.

What you can do (Application Manager)¶

• My Applications: view your protected scopes (access-controlled).
• My Servers: list servers per scope, Protect / Unprotect, export server list to Excel.
• My Rules: view microsegmentation rules for your scope, export rules to Excel.

Break Glass (business first)¶

Use Break Glass when legitimate traffic is blocked and the priority is to restore service quickly:

• Temporarily suspends enforcement for a scope (controlled emergency access).
• Must be used as a short-term action, followed by rule remediation.

Governance for Protect / Unprotect¶

Because these actions are highly impacting, Microcosmos requests a ticket number:

• Unprotect → Incident (Unity ticket)
• Protect → Change (Unity ticket)

Access model (aligned with IAM)¶

Authorization aligns with IAM Platform scopes:

• psg_read → read-only access
• psg_write → Protect/Unprotect and write actions

Auditor access is read-only with wider visibility (compliance checks), without Protect/Unprotect.

➡️ Access procedure (to be completed): Request the required IAM scopes

Screenshots (placeholders)¶