asset_groups
Manage BloodHound asset isolation groups and tags: create, update, delete groups, handle memberships, selectors, tags, and certifications for access control.
Instructions
Manage Asset isolation groups and tages in BloodHound
info_type options:
list - list all asset groups (optional filters: name, tag, sort_by, system_group)
get - get a specific asset group (requires: asset_group_id)
create - create a new asset group (requires: name, tag)
update - update an existing asset group (requires: asset_group_id)
delete - delete an asset group (requires: asset_group_id)
collections - list historical membership snapshots (requires: asset_group_id)
custom_selectors - get custom selector/member count (requires: asset_group_id)
members - list asset group members (requires: asset_group_id)
member_counts - get member counts by object type (requires: asset_group_id)
combo_node - get the combo tree for an asset group (requires: asset_group_id)
create_selectors - add auto membership selectors (requires: asset_group_id, selectors_json)
update_selectors - set auto membership selectors (requires: asset_group_id, selectors_json)
delete_selector - delete an asset group selector (requires: asset_group_id, asset_group_selector_id)
list_tags - list asset group tags (optional: name, tag, sort_by)
create_tag - create a new asset group tag (requires: name, tag)
tag_members - list members of a tag (requires: asset_group_tag_id)
tag_member_selectors - get selectors for a tag member (requires: asset_group_tag_id, asset_group_member_id)
tag_member_counts - get tag member counts (requires: asset_group_tag_id)
tag_selectors - list tag selectors (requires: asset_group_tag_id)
tag_selector_members - list members for a tag selector (requires: asset_group_tag_id, asset_group_tag_selector_id)
tag_selector_member_counts - count members for a tag selector (requires: asset_group_tag_id, asset_group_tag_selector_id)
preview_tag_selectors - preview selectors (requires: request_json)
search_tags - search asset group tags (requires: request_json)
tag_history - list tag history records
search_tag_history - search tag history records (requires: request_json)
certifications - get certifications for privilege zones
update_certifications - certify or revoke objects (requires: request_json)
args:
info_type: operation to perform (default: list)
asset_group_id: Asset group ID (for get, update, delete, collections, member_counts, update_selectors)
asset_group_tag_id: Tag ID (for tag_members)
name: Group/tag name (for create, update, create_tag, or filters)
tag: Tag value (for create, update, create_tag, or filters)
sort_by: Sort field (for list, list tags)
system_group: Filter by system group (for list)
selectors_json: JSON array of selector specs (for update_selectors)
request_json: JSON request body for preview/search/certification actions
skip: Pagination offset (default 0)
limit: Max results (default 100)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tag | No | ||
| name | No | ||
| skip | No | ||
| limit | No | ||
| sort_by | No | ||
| info_type | No | list | |
| request_json | No | ||
| system_group | No | ||
| asset_group_id | No | ||
| selectors_json | No | ||
| asset_group_tag_id | No | ||
| asset_group_member_id | No | ||
| asset_group_selector_id | No | ||
| asset_group_tag_selector_id | No |