anchor.diff:  security groups:     dns, p-mysql, p.mysql, pcf-redis, public_networks, rabbitmq, ssh-logging
   </pre>
   
  -## <a id="manage_is"></a> Manage an Isolation Segment
  -
  -The `cf curl` requests and cf CLI commands listed in the sections below make changes to isolation segment objects in the CCDB. Only admins can make these changes.
  -
  -### <a id="delete_is"></a> Delete an Isolation Segment
  +## <a id="delete_is"></a> Delete an Isolation Segment
   
   <p class="note"><strong>Note</strong>: An isolation segment with deployed apps cannot be deleted.</p>
   
  +Only admins can delete isolation segments.
  +
   The following command deletes an isolation segment:
   <pre class="terminal">
   $ cf delete-isolation-segment
  
positive.code: 
  ### <a id="assign_iso_seg"></a> Assign an Isolation Segment to a Space
  
  Admins and org managers can assign an isolation segment to a specific space. Apps in that space start in the specified isolation segment.
  
  To assign an isolation segment to a space, you must first enable the isolation segment for the space's org.
  
  The following command assigns an isolation segment to a space:
  
  
negative.code: 
  ### <a id="list_is_org"></a> Display Isolation Segments Enabled for an Org
  
  An admin can entitle an org to multiple isolation segments.
  
  To view the isolation segments that are available to an org, use the `cf org ORG-NAME` command. For example:
  
  <pre class="terminal">
  $ cf org my-org
  